*filter
:SCHOOL -

# Povolime set pojitek
-A SCHOOL -m set --set school-link dst -j RETURN

# Explictni zadost, Hadrbolec / Kaline, ticket ID#2013010710000264
-A SCHOOL -s 10.102.111.136 -j RETURN

# Povolime serverovnu
-A SCHOOL -s 10.102.223.0/23 -j RETURN
-A SCHOOL -s 10.102.0.248/29 -j RETURN

# Povolime vlastni skolni sit
-A SCHOOL -s 172.24.0.0/16 -j RETURN
-A SCHOOL -s 172.25.0.0/16 -j RETURN

# A cele 10/8 pujde k certu
-A SCHOOL -s 10.0.0.0/8 -j DROP

# Navazani na forward chain
-A FORWARD -d 172.24.0.0/16 -j SCHOOL

-I CONNLIMIT-ABUSE 1 -s 172.24.0.0/16 -j RETURN

COMMIT