pre *mangle
pre :PREROUTING ACCEPT [0:0]
pre :INPUT ACCEPT [0:0]
pre :FORWARD ACCEPT [0:0]
pre :OUTPUT ACCEPT [0:0]
pre :POSTROUTING ACCEPT [0:0]
pre :selinux_input - [0:0]
pre :selinux_output - [0:0]
pre :selinux_new_input - [0:0]
pre :selinux_new_output - [0:0]
pre -A INPUT -j selinux_input
pre -A OUTPUT -j selinux_output
pre -A selinux_input -m state --state NEW -j selinux_new_input
pre -A selinux_input -m state --state RELATED,ESTABLISHED -j CONNSECMARK --restore
pre -A selinux_output -m state --state NEW -j selinux_new_output
pre -A selinux_output -m state --state RELATED,ESTABLISHED -j CONNSECMARK --restore
base -A selinux_new_input -j SECMARK --selctx system_u:object_r:server_packet_t
base -A selinux_new_input -p icmp -j SECMARK --selctx system_u:object_r:icmp_packet_t
base -A selinux_new_input -p icmpv6 -j SECMARK --selctx system_u:object_r:icmp_packet_t
base -A selinux_new_input -p udp --dport 7007 -j SECMARK --selctx system_u:object_r:afs_bos_server_packet_t
base -A selinux_new_input -p tcp --dport 2040 -j SECMARK --selctx system_u:object_r:afs_fs_server_packet_t
base -A selinux_new_input -p udp --dport 7000 -j SECMARK --selctx system_u:object_r:afs_fs_server_packet_t
base -A selinux_new_input -p udp --dport 7005 -j SECMARK --selctx system_u:object_r:afs_fs_server_packet_t
base -A selinux_new_input -p udp --dport 7004 -j SECMARK --selctx system_u:object_r:afs_ka_server_packet_t
base -A selinux_new_input -p udp --dport 7002 -j SECMARK --selctx system_u:object_r:afs_pt_server_packet_t
base -A selinux_new_input -p udp --dport 7003 -j SECMARK --selctx system_u:object_r:afs_vl_server_packet_t
base -A selinux_new_input -p tcp --dport 7001 -j SECMARK --selctx system_u:object_r:afs3_callback_server_packet_t
base -A selinux_new_input -p udp --dport 7001 -j SECMARK --selctx system_u:object_r:afs3_callback_server_packet_t
base -A selinux_new_input -p udp --dport 705 -j SECMARK --selctx system_u:object_r:agentx_server_packet_t
base -A selinux_new_input -p tcp --dport 705 -j SECMARK --selctx system_u:object_r:agentx_server_packet_t
base -A selinux_new_input -p udp --dport 10080:10082 -j SECMARK --selctx system_u:object_r:amanda_server_packet_t
base -A selinux_new_input -p tcp --dport 10080:10083 -j SECMARK --selctx system_u:object_r:amanda_server_packet_t
base -A selinux_new_input -p tcp --dport 10024 -j SECMARK --selctx system_u:object_r:amavisd_recv_server_packet_t
base -A selinux_new_input -p tcp --dport 10025 -j SECMARK --selctx system_u:object_r:amavisd_send_server_packet_t
base -A selinux_new_input -p udp --dport 5671:5672 -j SECMARK --selctx system_u:object_r:amqp_server_packet_t
base -A selinux_new_input -p tcp --dport 5671:5672 -j SECMARK --selctx system_u:object_r:amqp_server_packet_t
base -A selinux_new_input -p udp --dport 5190:5193 -j SECMARK --selctx system_u:object_r:aol_server_packet_t
base -A selinux_new_input -p tcp --dport 5190:5193 -j SECMARK --selctx system_u:object_r:aol_server_packet_t
base -A selinux_new_input -p tcp --dport 3551 -j SECMARK --selctx system_u:object_r:apcupsd_server_packet_t
base -A selinux_new_input -p udp --dport 3551 -j SECMARK --selctx system_u:object_r:apcupsd_server_packet_t
base -A selinux_new_input -p tcp --dport 539 -j SECMARK --selctx system_u:object_r:apertus_ldp_server_packet_t
base -A selinux_new_input -p udp --dport 539 -j SECMARK --selctx system_u:object_r:apertus_ldp_server_packet_t
base -A selinux_new_input -p tcp --dport 3142 -j SECMARK --selctx system_u:object_r:aptcacher_server_packet_t
base -A selinux_new_input -p tcp --dport 9292 -j SECMARK --selctx system_u:object_r:armtechdaemon_server_packet_t
base -A selinux_new_input -p udp --dport 9292 -j SECMARK --selctx system_u:object_r:armtechdaemon_server_packet_t
base -A selinux_new_input -p tcp --dport 1720 -j SECMARK --selctx system_u:object_r:asterisk_server_packet_t
base -A selinux_new_input -p udp --dport 2427 -j SECMARK --selctx system_u:object_r:asterisk_server_packet_t
base -A selinux_new_input -p udp --dport 2727 -j SECMARK --selctx system_u:object_r:asterisk_server_packet_t
base -A selinux_new_input -p udp --dport 4569 -j SECMARK --selctx system_u:object_r:asterisk_server_packet_t
base -A selinux_new_input -p tcp --dport 60 -j SECMARK --selctx system_u:object_r:audit_server_packet_t
base -A selinux_new_input -p tcp --dport 113 -j SECMARK --selctx system_u:object_r:auth_server_packet_t
base -A selinux_new_input -p tcp --dport 179 -j SECMARK --selctx system_u:object_r:bgp_server_packet_t
base -A selinux_new_input -p udp --dport 179 -j SECMARK --selctx system_u:object_r:bgp_server_packet_t
base -A selinux_new_input -p tcp --dport 2605 -j SECMARK --selctx system_u:object_r:bgp_server_packet_t
base -A selinux_new_input -p udp --dport 2605 -j SECMARK --selctx system_u:object_r:bgp_server_packet_t
base -A selinux_new_input -p tcp --dport 31416 -j SECMARK --selctx system_u:object_r:boinc_server_packet_t
base -A selinux_new_input -p tcp --dport 1043 -j SECMARK --selctx system_u:object_r:boinc_client_server_packet_t
base -A selinux_new_input -p udp --dport 1034 -j SECMARK --selctx system_u:object_r:boinc_client_server_packet_t
base -A selinux_new_input -p tcp --dport 51235 -j SECMARK --selctx system_u:object_r:certmaster_server_packet_t
base -A selinux_new_input -p udp --dport 323 -j SECMARK --selctx system_u:object_r:chronyd_server_packet_t
base -A selinux_new_input -p tcp --dport 3310 -j SECMARK --selctx system_u:object_r:clamd_server_packet_t
base -A selinux_new_input -p udp --dport 4041 -j SECMARK --selctx system_u:object_r:clockspeed_server_packet_t
base -A selinux_new_input -p tcp --dport 5149 -j SECMARK --selctx system_u:object_r:cluster_server_packet_t
base -A selinux_new_input -p udp --dport 5149 -j SECMARK --selctx system_u:object_r:cluster_server_packet_t
base -A selinux_new_input -p tcp --dport 40040 -j SECMARK --selctx system_u:object_r:cluster_server_packet_t
base -A selinux_new_input -p tcp --dport 50006:50008 -j SECMARK --selctx system_u:object_r:cluster_server_packet_t
base -A selinux_new_input -p udp --dport 50006:50008 -j SECMARK --selctx system_u:object_r:cluster_server_packet_t
base -A selinux_new_input -p tcp --dport 1050 -j SECMARK --selctx system_u:object_r:cma_server_packet_t
base -A selinux_new_input -p udp --dport 1050 -j SECMARK --selctx system_u:object_r:cma_server_packet_t
base -A selinux_new_input -p tcp --dport 25151 -j SECMARK --selctx system_u:object_r:cobbler_server_packet_t
base -A selinux_new_input -p tcp --dport 5001 -j SECMARK --selctx system_u:object_r:commplex_link_server_packet_t
base -A selinux_new_input -p udp --dport 5001 -j SECMARK --selctx system_u:object_r:commplex_link_server_packet_t
base -A selinux_new_input -p tcp --dport 5000 -j SECMARK --selctx system_u:object_r:commplex_main_server_packet_t
base -A selinux_new_input -p udp --dport 5000 -j SECMARK --selctx system_u:object_r:commplex_main_server_packet_t
base -A selinux_new_input -p udp --dport 512 -j SECMARK --selctx system_u:object_r:comsat_server_packet_t
base -A selinux_new_input -p tcp --dport 9618 -j SECMARK --selctx system_u:object_r:condor_server_packet_t
base -A selinux_new_input -p udp --dport 9618 -j SECMARK --selctx system_u:object_r:condor_server_packet_t
base -A selinux_new_input -p tcp --dport 5984 -j SECMARK --selctx system_u:object_r:couchdb_server_packet_t
base -A selinux_new_input -p udp --dport 5984 -j SECMARK --selctx system_u:object_r:couchdb_server_packet_t
base -A selinux_new_input -p tcp --dport 9000 -j SECMARK --selctx system_u:object_r:cslistener_server_packet_t
base -A selinux_new_input -p udp --dport 9000 -j SECMARK --selctx system_u:object_r:cslistener_server_packet_t
base -A selinux_new_input -p tcp --dport 4379 -j SECMARK --selctx system_u:object_r:ctdb_server_packet_t
base -A selinux_new_input -p udp --dport 4397 -j SECMARK --selctx system_u:object_r:ctdb_server_packet_t
base -A selinux_new_input -p tcp --dport 2401 -j SECMARK --selctx system_u:object_r:cvs_server_packet_t
base -A selinux_new_input -p udp --dport 2401 -j SECMARK --selctx system_u:object_r:cvs_server_packet_t
base -A selinux_new_input -p tcp --dport 6767 -j SECMARK --selctx system_u:object_r:cyphesis_server_packet_t
base -A selinux_new_input -p tcp --dport 6769 -j SECMARK --selctx system_u:object_r:cyphesis_server_packet_t
base -A selinux_new_input -p tcp --dport 6780:6799 -j SECMARK --selctx system_u:object_r:cyphesis_server_packet_t
base -A selinux_new_input -p udp --dport 32771 -j SECMARK --selctx system_u:object_r:cyphesis_server_packet_t
base -A selinux_new_input -p tcp --dport 3689 -j SECMARK --selctx system_u:object_r:daap_server_packet_t
base -A selinux_new_input -p udp --dport 3689 -j SECMARK --selctx system_u:object_r:daap_server_packet_t
base -A selinux_new_input -p tcp --dport 1178 -j SECMARK --selctx system_u:object_r:dbskkd_server_packet_t
base -A selinux_new_input -p udp --dport 6276 -j SECMARK --selctx system_u:object_r:dcc_server_packet_t
base -A selinux_new_input -p udp --dport 6277 -j SECMARK --selctx system_u:object_r:dcc_server_packet_t
base -A selinux_new_input -p tcp --dport 5679 -j SECMARK --selctx system_u:object_r:dccm_server_packet_t
base -A selinux_new_input -p udp --dport 5679 -j SECMARK --selctx system_u:object_r:dccm_server_packet_t
base -A selinux_new_input -p udp --dport 68 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p tcp --dport 68 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p udp --dport 546 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p tcp --dport 546 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p udp --dport 5546 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p tcp --dport 5546 -j SECMARK --selctx system_u:object_r:dhcpc_server_packet_t
base -A selinux_new_input -p udp --dport 67 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p udp --dport 547 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 547 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p udp --dport 548 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 548 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 647 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p udp --dport 647 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 847 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p udp --dport 847 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 7911 -j SECMARK --selctx system_u:object_r:dhcpd_server_packet_t
base -A selinux_new_input -p tcp --dport 2628 -j SECMARK --selctx system_u:object_r:dict_server_packet_t
base -A selinux_new_input -p tcp --dport 3632 -j SECMARK --selctx system_u:object_r:distccd_server_packet_t
base -A selinux_new_input -p tcp --dport 53 -j SECMARK --selctx system_u:object_r:dns_server_packet_t
base -A selinux_new_input -p udp --dport 53 -j SECMARK --selctx system_u:object_r:dns_server_packet_t
base -A selinux_new_input -p tcp --dport 853 -j SECMARK --selctx system_u:object_r:dns_server_packet_t
base -A selinux_new_input -p tcp --dport 17500 -j SECMARK --selctx system_u:object_r:dropbox_server_packet_t
base -A selinux_new_input -p udp --dport 17500 -j SECMARK --selctx system_u:object_r:dropbox_server_packet_t
base -A selinux_new_input -p tcp --dport 520 -j SECMARK --selctx system_u:object_r:efs_server_packet_t
base -A selinux_new_input -p tcp --dport 3198 -j SECMARK --selctx system_u:object_r:embrace_dp_c_server_packet_t
base -A selinux_new_input -p udp --dport 3198 -j SECMARK --selctx system_u:object_r:embrace_dp_c_server_packet_t
base -A selinux_new_input -p tcp --dport 135 -j SECMARK --selctx system_u:object_r:epmap_server_packet_t
base -A selinux_new_input -p udp --dport 135 -j SECMARK --selctx system_u:object_r:epmap_server_packet_t
base -A selinux_new_input -p tcp --dport 4369 -j SECMARK --selctx system_u:object_r:epmd_server_packet_t
base -A selinux_new_input -p udp --dport 4369 -j SECMARK --selctx system_u:object_r:epmd_server_packet_t
base -A selinux_new_input -p tcp --dport 79 -j SECMARK --selctx system_u:object_r:fingerd_server_packet_t
base -A selinux_new_input -p tcp --dport 21 -j SECMARK --selctx system_u:object_r:ftp_server_packet_t
base -A selinux_new_input -p tcp --dport 990 -j SECMARK --selctx system_u:object_r:ftp_server_packet_t
base -A selinux_new_input -p udp --dport 990 -j SECMARK --selctx system_u:object_r:ftp_server_packet_t
base -A selinux_new_input -p tcp --dport 20 -j SECMARK --selctx system_u:object_r:ftp_data_server_packet_t
base -A selinux_new_input -p udp --dport 1718 -j SECMARK --selctx system_u:object_r:gatekeeper_server_packet_t
base -A selinux_new_input -p udp --dport 1719 -j SECMARK --selctx system_u:object_r:gatekeeper_server_packet_t
base -A selinux_new_input -p tcp --dport 1721 -j SECMARK --selctx system_u:object_r:gatekeeper_server_packet_t
base -A selinux_new_input -p tcp --dport 7000 -j SECMARK --selctx system_u:object_r:gatekeeper_server_packet_t
base -A selinux_new_input -p tcp --dport 538 -j SECMARK --selctx system_u:object_r:gdomap_server_packet_t
base -A selinux_new_input -p udp --dport 538 -j SECMARK --selctx system_u:object_r:gdomap_server_packet_t
base -A selinux_new_input -p tcp --dport 3050 -j SECMARK --selctx system_u:object_r:gds_db_server_packet_t
base -A selinux_new_input -p udp --dport 3050 -j SECMARK --selctx system_u:object_r:gds_db_server_packet_t
base -A selinux_new_input -p tcp --dport 9418 -j SECMARK --selctx system_u:object_r:git_server_packet_t
base -A selinux_new_input -p udp --dport 9418 -j SECMARK --selctx system_u:object_r:git_server_packet_t
base -A selinux_new_input -p tcp --dport 9191 -j SECMARK --selctx system_u:object_r:glance_registry_server_packet_t
base -A selinux_new_input -p udp --dport 9191 -j SECMARK --selctx system_u:object_r:glance_registry_server_packet_t
base -A selinux_new_input -p tcp --dport 70 -j SECMARK --selctx system_u:object_r:gopher_server_packet_t
base -A selinux_new_input -p udp --dport 70 -j SECMARK --selctx system_u:object_r:gopher_server_packet_t
base -A selinux_new_input -p tcp --dport 2947 -j SECMARK --selctx system_u:object_r:gpsd_server_packet_t
base -A selinux_new_input -p tcp --dport 50010 -j SECMARK --selctx system_u:object_r:hadoop_datanode_server_packet_t
base -A selinux_new_input -p tcp --dport 8020 -j SECMARK --selctx system_u:object_r:hadoop_namenode_server_packet_t
base -A selinux_new_input -p tcp --dport 7634 -j SECMARK --selctx system_u:object_r:hddtemp_server_packet_t
base -A selinux_new_input -p tcp --dport 5335 -j SECMARK --selctx system_u:object_r:howl_server_packet_t
base -A selinux_new_input -p udp --dport 5353 -j SECMARK --selctx system_u:object_r:howl_server_packet_t
base -A selinux_new_input -p tcp --dport 1782 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 2207 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 2208 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 8290 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 50000 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 50002 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 8292 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9100 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9101 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9102 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9220 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9221 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9222 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9280 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9281 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9282 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9290 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 9291 -j SECMARK --selctx system_u:object_r:hplip_server_packet_t
base -A selinux_new_input -p tcp --dport 80 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 443 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 488 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 8008 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 8009 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 8443 -j SECMARK --selctx system_u:object_r:http_server_packet_t
base -A selinux_new_input -p tcp --dport 3128 -j SECMARK --selctx system_u:object_r:http_cache_server_packet_t
base -A selinux_new_input -p udp --dport 3130 -j SECMARK --selctx system_u:object_r:http_cache_server_packet_t
base -A selinux_new_input -p tcp --dport 8080 -j SECMARK --selctx system_u:object_r:http_cache_server_packet_t
base -A selinux_new_input -p tcp --dport 8118 -j SECMARK --selctx system_u:object_r:http_cache_server_packet_t
base -A selinux_new_input -p tcp --dport 10001:10010 -j SECMARK --selctx system_u:object_r:http_cache_server_packet_t
base -A selinux_new_input -p tcp --dport 9010 -j SECMARK --selctx system_u:object_r:i18n_input_server_packet_t
base -A selinux_new_input -p tcp --dport 5323 -j SECMARK --selctx system_u:object_r:imaze_server_packet_t
base -A selinux_new_input -p udp --dport 5323 -j SECMARK --selctx system_u:object_r:imaze_server_packet_t
base -A selinux_new_input -p tcp --dport 1 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 1 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 7 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 7 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 9 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 9 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 13 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 13 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 19 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 19 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 37 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 37 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 512 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 543 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 544 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 891 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 891 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 892 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p udp --dport 892 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 2105 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 5666 -j SECMARK --selctx system_u:object_r:inetd_child_server_packet_t
base -A selinux_new_input -p tcp --dport 119 -j SECMARK --selctx system_u:object_r:innd_server_packet_t
base -A selinux_new_input -p tcp --dport 7778 -j SECMARK --selctx system_u:object_r:interwise_server_packet_t
base -A selinux_new_input -p udp --dport 7778 -j SECMARK --selctx system_u:object_r:interwise_server_packet_t
base -A selinux_new_input -p tcp --dport 7410 -j SECMARK --selctx system_u:object_r:ionixnetmon_server_packet_t
base -A selinux_new_input -p udp --dport 7410 -j SECMARK --selctx system_u:object_r:ionixnetmon_server_packet_t
base -A selinux_new_input -p udp --dport 623 -j SECMARK --selctx system_u:object_r:ipmi_server_packet_t
base -A selinux_new_input -p udp --dport 664 -j SECMARK --selctx system_u:object_r:ipmi_server_packet_t
base -A selinux_new_input -p tcp --dport 631 -j SECMARK --selctx system_u:object_r:ipp_server_packet_t
base -A selinux_new_input -p udp --dport 631 -j SECMARK --selctx system_u:object_r:ipp_server_packet_t
base -A selinux_new_input -p tcp --dport 8610:8614 -j SECMARK --selctx system_u:object_r:ipp_server_packet_t
base -A selinux_new_input -p udp --dport 8610:8614 -j SECMARK --selctx system_u:object_r:ipp_server_packet_t
base -A selinux_new_input -p tcp --dport 4500 -j SECMARK --selctx system_u:object_r:ipsecnat_server_packet_t
base -A selinux_new_input -p udp --dport 4500 -j SECMARK --selctx system_u:object_r:ipsecnat_server_packet_t
base -A selinux_new_input -p tcp --dport 6665 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p tcp --dport 6666 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p tcp --dport 6667 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p tcp --dport 6668 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p tcp --dport 6669 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p tcp --dport 6697 -j SECMARK --selctx system_u:object_r:ircd_server_packet_t
base -A selinux_new_input -p udp --dport 500 -j SECMARK --selctx system_u:object_r:isakmp_server_packet_t
base -A selinux_new_input -p tcp --dport 3260 -j SECMARK --selctx system_u:object_r:iscsi_server_packet_t
base -A selinux_new_input -p tcp --dport 3205 -j SECMARK --selctx system_u:object_r:isns_server_packet_t
base -A selinux_new_input -p udp --dport 3205 -j SECMARK --selctx system_u:object_r:isns_server_packet_t
base -A selinux_new_input -p tcp --dport 5222 -j SECMARK --selctx system_u:object_r:jabber_client_server_packet_t
base -A selinux_new_input -p tcp --dport 5223 -j SECMARK --selctx system_u:object_r:jabber_client_server_packet_t
base -A selinux_new_input -p tcp --dport 5269 -j SECMARK --selctx system_u:object_r:jabber_interserver_server_packet_t
base -A selinux_new_input -p tcp --dport 3528 -j SECMARK --selctx system_u:object_r:jboss_iiop_server_packet_t
base -A selinux_new_input -p udp --dport 3528 -j SECMARK --selctx system_u:object_r:jboss_iiop_server_packet_t
base -A selinux_new_input -p tcp --dport 88 -j SECMARK --selctx system_u:object_r:kerberos_server_packet_t
base -A selinux_new_input -p udp --dport 88 -j SECMARK --selctx system_u:object_r:kerberos_server_packet_t
base -A selinux_new_input -p tcp --dport 750 -j SECMARK --selctx system_u:object_r:kerberos_server_packet_t
base -A selinux_new_input -p udp --dport 750 -j SECMARK --selctx system_u:object_r:kerberos_server_packet_t
base -A selinux_new_input -p tcp --dport 464 -j SECMARK --selctx system_u:object_r:kerberos_admin_server_packet_t
base -A selinux_new_input -p udp --dport 464 -j SECMARK --selctx system_u:object_r:kerberos_admin_server_packet_t
base -A selinux_new_input -p tcp --dport 749 -j SECMARK --selctx system_u:object_r:kerberos_admin_server_packet_t
base -A selinux_new_input -p tcp --dport 4444 -j SECMARK --selctx system_u:object_r:kerberos_master_server_packet_t
base -A selinux_new_input -p udp --dport 4444 -j SECMARK --selctx system_u:object_r:kerberos_master_server_packet_t
base -A selinux_new_input -p tcp --dport 2501 -j SECMARK --selctx system_u:object_r:kismet_server_packet_t
base -A selinux_new_input -p tcp --dport 754 -j SECMARK --selctx system_u:object_r:kprop_server_packet_t
base -A selinux_new_input -p udp --dport 517 -j SECMARK --selctx system_u:object_r:ktalkd_server_packet_t
base -A selinux_new_input -p udp --dport 518 -j SECMARK --selctx system_u:object_r:ktalkd_server_packet_t
base -A selinux_new_input -p tcp --dport 1701 -j SECMARK --selctx system_u:object_r:l2tp_server_packet_t
base -A selinux_new_input -p udp --dport 1701 -j SECMARK --selctx system_u:object_r:l2tp_server_packet_t
base -A selinux_new_input -p tcp --dport 389 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p udp --dport 389 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p tcp --dport 636 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p udp --dport 636 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p tcp --dport 3268 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p tcp --dport 3269 -j SECMARK --selctx system_u:object_r:ldap_server_packet_t
base -A selinux_new_input -p tcp --dport 8765 -j SECMARK --selctx system_u:object_r:lirc_server_packet_t
base -A selinux_new_input -p tcp --dport 5355 -j SECMARK --selctx system_u:object_r:llmnr_server_packet_t
base -A selinux_new_input -p udp --dport 5355 -j SECMARK --selctx system_u:object_r:llmnr_server_packet_t
base -A selinux_new_input -p tcp --dport 24 -j SECMARK --selctx system_u:object_r:lmtp_server_packet_t
base -A selinux_new_input -p udp --dport 24 -j SECMARK --selctx system_u:object_r:lmtp_server_packet_t
base -A selinux_new_input -p tcp --dport 2000 -j SECMARK --selctx system_u:object_r:mail_server_packet_t
base -A selinux_new_input -p tcp --dport 3905 -j SECMARK --selctx system_u:object_r:mail_server_packet_t
base -A selinux_new_input -p tcp --dport 49000 -j SECMARK --selctx system_u:object_r:matahari_server_packet_t
base -A selinux_new_input -p udp --dport 49000 -j SECMARK --selctx system_u:object_r:matahari_server_packet_t
base -A selinux_new_input -p tcp --dport 11211 -j SECMARK --selctx system_u:object_r:memcache_server_packet_t
base -A selinux_new_input -p udp --dport 11211 -j SECMARK --selctx system_u:object_r:memcache_server_packet_t
base -A selinux_new_input -p tcp --dport 5050 -j SECMARK --selctx system_u:object_r:mmcc_server_packet_t
base -A selinux_new_input -p udp --dport 5050 -j SECMARK --selctx system_u:object_r:mmcc_server_packet_t
base -A selinux_new_input -p tcp --dport 2583 -j SECMARK --selctx system_u:object_r:mon_server_packet_t
base -A selinux_new_input -p udp --dport 2583 -j SECMARK --selctx system_u:object_r:mon_server_packet_t
base -A selinux_new_input -p tcp --dport 2812 -j SECMARK --selctx system_u:object_r:monit_server_packet_t
base -A selinux_new_input -p tcp --dport 1234 -j SECMARK --selctx system_u:object_r:monopd_server_packet_t
base -A selinux_new_input -p tcp --dport 20048 -j SECMARK --selctx system_u:object_r:mountd_server_packet_t
base -A selinux_new_input -p udp --dport 20048 -j SECMARK --selctx system_u:object_r:mountd_server_packet_t
base -A selinux_new_input -p tcp --dport 5252 -j SECMARK --selctx system_u:object_r:movaz_ssc_server_packet_t
base -A selinux_new_input -p udp --dport 5252 -j SECMARK --selctx system_u:object_r:movaz_ssc_server_packet_t
base -A selinux_new_input -p tcp --dport 6600 -j SECMARK --selctx system_u:object_r:mpd_server_packet_t
base -A selinux_new_input -p tcp --dport 8787 -j SECMARK --selctx system_u:object_r:msgsrvr_server_packet_t
base -A selinux_new_input -p udp --dport 8787 -j SECMARK --selctx system_u:object_r:msgsrvr_server_packet_t
base -A selinux_new_input -p tcp --dport 1863 -j SECMARK --selctx system_u:object_r:msnp_server_packet_t
base -A selinux_new_input -p udp --dport 1863 -j SECMARK --selctx system_u:object_r:msnp_server_packet_t
base -A selinux_new_input -p tcp --dport 1433:1434 -j SECMARK --selctx system_u:object_r:mssql_server_packet_t
base -A selinux_new_input -p udp --dport 1433:1434 -j SECMARK --selctx system_u:object_r:mssql_server_packet_t
base -A selinux_new_input -p tcp --dport 1755 -j SECMARK --selctx system_u:object_r:ms_streaming_server_packet_t
base -A selinux_new_input -p udp --dport 1755 -j SECMARK --selctx system_u:object_r:ms_streaming_server_packet_t
base -A selinux_new_input -p tcp --dport 4949 -j SECMARK --selctx system_u:object_r:munin_server_packet_t
base -A selinux_new_input -p udp --dport 4949 -j SECMARK --selctx system_u:object_r:munin_server_packet_t
base -A selinux_new_input -p tcp --dport 8005 -j SECMARK --selctx system_u:object_r:mxi_server_packet_t
base -A selinux_new_input -p udp --dport 8005 -j SECMARK --selctx system_u:object_r:mxi_server_packet_t
base -A selinux_new_input -p tcp --dport 1186 -j SECMARK --selctx system_u:object_r:mysqld_server_packet_t
base -A selinux_new_input -p tcp --dport 3306 -j SECMARK --selctx system_u:object_r:mysqld_server_packet_t
base -A selinux_new_input -p tcp --dport 63132:63164 -j SECMARK --selctx system_u:object_r:mysqld_server_packet_t
base -A selinux_new_input -p tcp --dport 2273 -j SECMARK --selctx system_u:object_r:mysqlmanagerd_server_packet_t
base -A selinux_new_input -p tcp --dport 1241 -j SECMARK --selctx system_u:object_r:nessus_server_packet_t
base -A selinux_new_input -p tcp --dport 3129 -j SECMARK --selctx system_u:object_r:netport_server_packet_t
base -A selinux_new_input -p udp --dport 3129 -j SECMARK --selctx system_u:object_r:netport_server_packet_t
base -A selinux_new_input -p tcp --dport 5404 -j SECMARK --selctx system_u:object_r:netsupport_server_packet_t
base -A selinux_new_input -p udp --dport 5404 -j SECMARK --selctx system_u:object_r:netsupport_server_packet_t
base -A selinux_new_input -p tcp --dport 5405 -j SECMARK --selctx system_u:object_r:netsupport_server_packet_t
base -A selinux_new_input -p udp --dport 5405 -j SECMARK --selctx system_u:object_r:netsupport_server_packet_t
base -A selinux_new_input -p tcp --dport 2049 -j SECMARK --selctx system_u:object_r:nfs_server_packet_t
base -A selinux_new_input -p udp --dport 2049 -j SECMARK --selctx system_u:object_r:nfs_server_packet_t
base -A selinux_new_input -p tcp --dport 20049 -j SECMARK --selctx system_u:object_r:nfsrdma_server_packet_t
base -A selinux_new_input -p udp --dport 20049 -j SECMARK --selctx system_u:object_r:nfsrdma_server_packet_t
base -A selinux_new_input -p udp --dport 137 -j SECMARK --selctx system_u:object_r:nmbd_server_packet_t
base -A selinux_new_input -p udp --dport 138 -j SECMARK --selctx system_u:object_r:nmbd_server_packet_t
base -A selinux_new_input -p tcp --dport 3000:3001 -j SECMARK --selctx system_u:object_r:ntop_server_packet_t
base -A selinux_new_input -p udp --dport 3000:3001 -j SECMARK --selctx system_u:object_r:ntop_server_packet_t
base -A selinux_new_input -p udp --dport 123 -j SECMARK --selctx system_u:object_r:ntp_server_packet_t
base -A selinux_new_input -p tcp --dport 8022 -j SECMARK --selctx system_u:object_r:oa_system_server_packet_t
base -A selinux_new_input -p udp --dport 8022 -j SECMARK --selctx system_u:object_r:oa_system_server_packet_t
base -A selinux_new_input -p tcp --dport 1521 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p udp --dport 1521 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p tcp --dport 2483 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p udp --dport 2483 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p tcp --dport 2484 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p udp --dport 2484 -j SECMARK --selctx system_u:object_r:oracledb_server_packet_t
base -A selinux_new_input -p tcp --dport 9080 -j SECMARK --selctx system_u:object_r:ocsp_server_packet_t
base -A selinux_new_input -p tcp --dport 4743 -j SECMARK --selctx system_u:object_r:openhpid_server_packet_t
base -A selinux_new_input -p udp --dport 4743 -j SECMARK --selctx system_u:object_r:openhpid_server_packet_t
base -A selinux_new_input -p tcp --dport 1194 -j SECMARK --selctx system_u:object_r:openvpn_server_packet_t
base -A selinux_new_input -p udp --dport 1194 -j SECMARK --selctx system_u:object_r:openvpn_server_packet_t
base -A selinux_new_input -p tcp --dport 1314 -j SECMARK --selctx system_u:object_r:pdps_server_packet_t
base -A selinux_new_input -p udp --dport 1314 -j SECMARK --selctx system_u:object_r:pdps_server_packet_t
base -A selinux_new_input -p tcp --dport 5988 -j SECMARK --selctx system_u:object_r:pegasus_http_server_packet_t
base -A selinux_new_input -p tcp --dport 5989 -j SECMARK --selctx system_u:object_r:pegasus_https_server_packet_t
base -A selinux_new_input -p udp --dport 11371 -j SECMARK --selctx system_u:object_r:pgpkeyserver_server_packet_t
base -A selinux_new_input -p tcp --dport 11371 -j SECMARK --selctx system_u:object_r:pgpkeyserver_server_packet_t
base -A selinux_new_input -p tcp --dport 9125 -j SECMARK --selctx system_u:object_r:pingd_server_packet_t
base -A selinux_new_input -p tcp --dport 2126 -j SECMARK --selctx system_u:object_r:pktcable_cops_server_packet_t
base -A selinux_new_input -p udp --dport 2126 -j SECMARK --selctx system_u:object_r:pktcable_cops_server_packet_t
base -A selinux_new_input -p tcp --dport 106 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 109 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 110 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 143 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 220 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 993 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 995 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p tcp --dport 1109 -j SECMARK --selctx system_u:object_r:pop_server_packet_t
base -A selinux_new_input -p udp --dport 111 -j SECMARK --selctx system_u:object_r:portmap_server_packet_t
base -A selinux_new_input -p tcp --dport 111 -j SECMARK --selctx system_u:object_r:portmap_server_packet_t
base -A selinux_new_input -p tcp --dport 10031 -j SECMARK --selctx system_u:object_r:postfix_policyd_server_packet_t
base -A selinux_new_input -p tcp --dport 5432 -j SECMARK --selctx system_u:object_r:postgresql_server_packet_t
base -A selinux_new_input -p tcp --dport 10023 -j SECMARK --selctx system_u:object_r:postgrey_server_packet_t
base -A selinux_new_input -p tcp --dport 60000 -j SECMARK --selctx system_u:object_r:postgrey_server_packet_t
base -A selinux_new_input -p tcp --dport 1723 -j SECMARK --selctx system_u:object_r:pptp_server_packet_t
base -A selinux_new_input -p udp --dport 1723 -j SECMARK --selctx system_u:object_r:pptp_server_packet_t
base -A selinux_new_input -p tcp --dport 4690 -j SECMARK --selctx system_u:object_r:prelude_server_packet_t
base -A selinux_new_input -p udp --dport 4690 -j SECMARK --selctx system_u:object_r:prelude_server_packet_t
base -A selinux_new_input -p tcp --dport 5298:5299 -j SECMARK --selctx system_u:object_r:presence_server_packet_t
base -A selinux_new_input -p udp --dport 5298:5299 -j SECMARK --selctx system_u:object_r:presence_server_packet_t
base -A selinux_new_input -p tcp --dport 515 -j SECMARK --selctx system_u:object_r:printer_server_packet_t
base -A selinux_new_input -p tcp --dport 5703 -j SECMARK --selctx system_u:object_r:ptal_server_packet_t
base -A selinux_new_input -p tcp --dport 4713 -j SECMARK --selctx system_u:object_r:pulseaudio_server_packet_t
base -A selinux_new_input -p tcp --dport 8140 -j SECMARK --selctx system_u:object_r:puppet_server_packet_t
base -A selinux_new_input -p udp --dport 4011 -j SECMARK --selctx system_u:object_r:pxe_server_packet_t
base -A selinux_new_input -p udp --dport 24441 -j SECMARK --selctx system_u:object_r:pyzor_server_packet_t
base -A selinux_new_input -p udp --dport 1646 -j SECMARK --selctx system_u:object_r:radacct_server_packet_t
base -A selinux_new_input -p udp --dport 1813 -j SECMARK --selctx system_u:object_r:radacct_server_packet_t
base -A selinux_new_input -p udp --dport 1645 -j SECMARK --selctx system_u:object_r:radius_server_packet_t
base -A selinux_new_input -p udp --dport 1812 -j SECMARK --selctx system_u:object_r:radius_server_packet_t
base -A selinux_new_input -p tcp --dport 2083 -j SECMARK --selctx system_u:object_r:radsec_server_packet_t
base -A selinux_new_input -p tcp --dport 2703 -j SECMARK --selctx system_u:object_r:razor_server_packet_t
base -A selinux_new_input -p tcp --dport 6379 -j SECMARK --selctx system_u:object_r:redis_server_packet_t
base -A selinux_new_input -p tcp --dport 26379 -j SECMARK --selctx system_u:object_r:redis_server_packet_t
base -A selinux_new_input -p tcp --dport 6363 -j SECMARK --selctx system_u:object_r:repository_server_packet_t
base -A selinux_new_input -p tcp --dport 11111 -j SECMARK --selctx system_u:object_r:ricci_server_packet_t
base -A selinux_new_input -p udp --dport 11111 -j SECMARK --selctx system_u:object_r:ricci_server_packet_t
base -A selinux_new_input -p tcp --dport 16851 -j SECMARK --selctx system_u:object_r:ricci_modcluster_server_packet_t
base -A selinux_new_input -p udp --dport 16851 -j SECMARK --selctx system_u:object_r:ricci_modcluster_server_packet_t
base -A selinux_new_input -p tcp --dport 513 -j SECMARK --selctx system_u:object_r:rlogind_server_packet_t
base -A selinux_new_input -p tcp --dport 953 -j SECMARK --selctx system_u:object_r:rndc_server_packet_t
base -A selinux_new_input -p udp --dport 953 -j SECMARK --selctx system_u:object_r:rndc_server_packet_t
base -A selinux_new_input -p tcp --dport 8953 -j SECMARK --selctx system_u:object_r:rndc_server_packet_t
base -A selinux_new_input -p udp --dport 8953 -j SECMARK --selctx system_u:object_r:rndc_server_packet_t
base -A selinux_new_input -p udp --dport 520 -j SECMARK --selctx system_u:object_r:router_server_packet_t
base -A selinux_new_input -p udp --dport 521 -j SECMARK --selctx system_u:object_r:router_server_packet_t
base -A selinux_new_input -p tcp --dport 521 -j SECMARK --selctx system_u:object_r:router_server_packet_t
base -A selinux_new_input -p tcp --dport 514 -j SECMARK --selctx system_u:object_r:rsh_server_packet_t
base -A selinux_new_input -p tcp --dport 873 -j SECMARK --selctx system_u:object_r:rsync_server_packet_t
base -A selinux_new_input -p udp --dport 873 -j SECMARK --selctx system_u:object_r:rsync_server_packet_t
base -A selinux_new_input -p tcp --dport 554 -j SECMARK --selctx system_u:object_r:rtsp_server_packet_t
base -A selinux_new_input -p udp --dport 554 -j SECMARK --selctx system_u:object_r:rtsp_server_packet_t
base -A selinux_new_input -p udp --dport 513 -j SECMARK --selctx system_u:object_r:rwho_server_packet_t
base -A selinux_new_input -p tcp --dport 9875 -j SECMARK --selctx system_u:object_r:sap_server_packet_t
base -A selinux_new_input -p udp --dport 9875 -j SECMARK --selctx system_u:object_r:sap_server_packet_t
base -A selinux_new_input -p tcp --dport 3636 -j SECMARK --selctx system_u:object_r:servistaitsm_server_packet_t
base -A selinux_new_input -p udp --dport 3636 -j SECMARK --selctx system_u:object_r:servistaitsm_server_packet_t
base -A selinux_new_input -p tcp --dport 4190 -j SECMARK --selctx system_u:object_r:sieve_server_packet_t
base -A selinux_new_input -p tcp --dport 5060 -j SECMARK --selctx system_u:object_r:sip_server_packet_t
base -A selinux_new_input -p udp --dport 5060 -j SECMARK --selctx system_u:object_r:sip_server_packet_t
base -A selinux_new_input -p tcp --dport 5061 -j SECMARK --selctx system_u:object_r:sip_server_packet_t
base -A selinux_new_input -p udp --dport 5061 -j SECMARK --selctx system_u:object_r:sip_server_packet_t
base -A selinux_new_input -p tcp --dport 3874 -j SECMARK --selctx system_u:object_r:sixxsconfig_server_packet_t
base -A selinux_new_input -p udp --dport 3874 -j SECMARK --selctx system_u:object_r:sixxsconfig_server_packet_t
base -A selinux_new_input -p tcp --dport 137:139 -j SECMARK --selctx system_u:object_r:smbd_server_packet_t
base -A selinux_new_input -p tcp --dport 445 -j SECMARK --selctx system_u:object_r:smbd_server_packet_t
base -A selinux_new_input -p tcp --dport 25 -j SECMARK --selctx system_u:object_r:smtp_server_packet_t
base -A selinux_new_input -p tcp --dport 465 -j SECMARK --selctx system_u:object_r:smtp_server_packet_t
base -A selinux_new_input -p tcp --dport 587 -j SECMARK --selctx system_u:object_r:smtp_server_packet_t
base -A selinux_new_input -p udp --dport 161 -j SECMARK --selctx system_u:object_r:snmp_server_packet_t
base -A selinux_new_input -p udp --dport 162 -j SECMARK --selctx system_u:object_r:snmp_server_packet_t
base -A selinux_new_input -p tcp --dport 199 -j SECMARK --selctx system_u:object_r:snmp_server_packet_t
base -A selinux_new_input -p tcp --dport 1161 -j SECMARK --selctx system_u:object_r:snmp_server_packet_t
base -A selinux_new_input -p tcp --dport 8000 -j SECMARK --selctx system_u:object_r:soundd_server_packet_t
base -A selinux_new_input -p tcp --dport 9433 -j SECMARK --selctx system_u:object_r:soundd_server_packet_t
base -A selinux_new_input -p tcp --dport 16001 -j SECMARK --selctx system_u:object_r:soundd_server_packet_t
base -A selinux_new_input -p tcp --dport 783 -j SECMARK --selctx system_u:object_r:spamd_server_packet_t
base -A selinux_new_input -p tcp --dport 8036 -j SECMARK --selctx system_u:object_r:speech_server_packet_t
base -A selinux_new_input -p udp --dport 3401 -j SECMARK --selctx system_u:object_r:squid_server_packet_t
base -A selinux_new_input -p tcp --dport 3401 -j SECMARK --selctx system_u:object_r:squid_server_packet_t
base -A selinux_new_input -p udp --dport 4827 -j SECMARK --selctx system_u:object_r:squid_server_packet_t
base -A selinux_new_input -p tcp --dport 4827 -j SECMARK --selctx system_u:object_r:squid_server_packet_t
base -A selinux_new_input -p tcp --dport 1900 -j SECMARK --selctx system_u:object_r:ssdp_server_packet_t
base -A selinux_new_input -p udp --dport 1900 -j SECMARK --selctx system_u:object_r:ssdp_server_packet_t
base -A selinux_new_input -p tcp --dport 22 -j SECMARK --selctx system_u:object_r:ssh_server_packet_t
base -A selinux_new_input -p tcp --dport 3690 -j SECMARK --selctx system_u:object_r:svn_server_packet_t
base -A selinux_new_input -p udp --dport 3690 -j SECMARK --selctx system_u:object_r:svn_server_packet_t
base -A selinux_new_input -p tcp --dport 427 -j SECMARK --selctx system_u:object_r:svrloc_server_packet_t
base -A selinux_new_input -p udp --dport 427 -j SECMARK --selctx system_u:object_r:svrloc_server_packet_t
base -A selinux_new_input -p tcp --dport 901 -j SECMARK --selctx system_u:object_r:swat_server_packet_t
base -A selinux_new_input -p tcp --dport 22000 -j SECMARK --selctx system_u:object_r:syncthing_server_packet_t
base -A selinux_new_input -p tcp --dport 8384 -j SECMARK --selctx system_u:object_r:syncthing_admin_server_packet_t
base -A selinux_new_input -p udp --dport 21027 -j SECMARK --selctx system_u:object_r:syncthing_discovery_server_packet_t
base -A selinux_new_input -p tcp --dport 9911 -j SECMARK --selctx system_u:object_r:sype_transport_server_packet_t
base -A selinux_new_input -p udp --dport 9911 -j SECMARK --selctx system_u:object_r:sype_transport_server_packet_t
base -A selinux_new_input -p udp --dport 514 -j SECMARK --selctx system_u:object_r:syslogd_server_packet_t
base -A selinux_new_input -p tcp --dport 6514 -j SECMARK --selctx system_u:object_r:syslog_tls_server_packet_t
base -A selinux_new_input -p udp --dport 6514 -j SECMARK --selctx system_u:object_r:syslog_tls_server_packet_t
base -A selinux_new_input -p tcp --dport 30003 -j SECMARK --selctx system_u:object_r:tcs_server_packet_t
base -A selinux_new_input -p tcp --dport 23 -j SECMARK --selctx system_u:object_r:telnetd_server_packet_t
base -A selinux_new_input -p udp --dport 69 -j SECMARK --selctx system_u:object_r:tftp_server_packet_t
base -A selinux_new_input -p tcp --dport 6969 -j SECMARK --selctx system_u:object_r:tor_server_packet_t
base -A selinux_new_input -p tcp --dport 9001 -j SECMARK --selctx system_u:object_r:tor_server_packet_t
base -A selinux_new_input -p tcp --dport 9030 -j SECMARK --selctx system_u:object_r:tor_server_packet_t
base -A selinux_new_input -p tcp --dport 9050 -j SECMARK --selctx system_u:object_r:tor_server_packet_t
base -A selinux_new_input -p tcp --dport 9051 -j SECMARK --selctx system_u:object_r:tor_server_packet_t
base -A selinux_new_input -p udp --dport 64000:64010 -j SECMARK --selctx system_u:object_r:traceroute_server_packet_t
base -A selinux_new_input -p tcp --dport 8081 -j SECMARK --selctx system_u:object_r:transproxy_server_packet_t
base -A selinux_new_input -p tcp --dport 10200 -j SECMARK --selctx system_u:object_r:trisoap_server_packet_t
base -A selinux_new_input -p udp --dport 10200 -j SECMARK --selctx system_u:object_r:trisoap_server_packet_t
base -A selinux_new_input -p tcp --dport 8200 -j SECMARK --selctx system_u:object_r:trivnet1_server_packet_t
base -A selinux_new_input -p udp --dport 8200 -j SECMARK --selctx system_u:object_r:trivnet1_server_packet_t
base -A selinux_new_input -p tcp --dport 3493 -j SECMARK --selctx system_u:object_r:ups_server_packet_t
base -A selinux_new_input -p tcp --dport 540 -j SECMARK --selctx system_u:object_r:uucpd_server_packet_t
base -A selinux_new_input -p tcp --dport 6081:6082 -j SECMARK --selctx system_u:object_r:varnishd_server_packet_t
base -A selinux_new_input -p tcp --dport 16509 -j SECMARK --selctx system_u:object_r:virt_server_packet_t
base -A selinux_new_input -p udp --dport 16509 -j SECMARK --selctx system_u:object_r:virt_server_packet_t
base -A selinux_new_input -p tcp --dport 16514 -j SECMARK --selctx system_u:object_r:virt_server_packet_t
base -A selinux_new_input -p udp --dport 16514 -j SECMARK --selctx system_u:object_r:virt_server_packet_t
base -A selinux_new_input -p tcp --dport 1533 -j SECMARK --selctx system_u:object_r:virtual_places_server_packet_t
base -A selinux_new_input -p udp --dport 1533 -j SECMARK --selctx system_u:object_r:virtual_places_server_packet_t
base -A selinux_new_input -p tcp --dport 49152:49216 -j SECMARK --selctx system_u:object_r:virt_migration_server_packet_t
base -A selinux_new_input -p tcp --dport 5900 -j SECMARK --selctx system_u:object_r:vnc_server_packet_t
base -A selinux_new_input -p udp --dport 2048 -j SECMARK --selctx system_u:object_r:wccp_server_packet_t
base -A selinux_new_input -p tcp --dport 9090 -j SECMARK --selctx system_u:object_r:websm_server_packet_t
base -A selinux_new_input -p udp --dport 9090 -j SECMARK --selctx system_u:object_r:websm_server_packet_t
base -A selinux_new_input -p tcp --dport 43 -j SECMARK --selctx system_u:object_r:whois_server_packet_t
base -A selinux_new_input -p udp --dport 43 -j SECMARK --selctx system_u:object_r:whois_server_packet_t
base -A selinux_new_input -p tcp --dport 4321 -j SECMARK --selctx system_u:object_r:whois_server_packet_t
base -A selinux_new_input -p udp --dport 4321 -j SECMARK --selctx system_u:object_r:whois_server_packet_t
base -A selinux_new_input -p tcp --dport 3261 -j SECMARK --selctx system_u:object_r:winshadow_server_packet_t
base -A selinux_new_input -p udp --dport 3261 -j SECMARK --selctx system_u:object_r:winshadow_server_packet_t
base -A selinux_new_input -p tcp --dport 5357 -j SECMARK --selctx system_u:object_r:wsdapi_server_packet_t
base -A selinux_new_input -p udp --dport 5357 -j SECMARK --selctx system_u:object_r:wsdapi_server_packet_t
base -A selinux_new_input -p tcp --dport 3378 -j SECMARK --selctx system_u:object_r:wsicopy_server_packet_t
base -A selinux_new_input -p udp --dport 3378 -j SECMARK --selctx system_u:object_r:wsicopy_server_packet_t
base -A selinux_new_input -p udp --dport 177 -j SECMARK --selctx system_u:object_r:xdmcp_server_packet_t
base -A selinux_new_input -p tcp --dport 177 -j SECMARK --selctx system_u:object_r:xdmcp_server_packet_t
base -A selinux_new_input -p tcp --dport 8002 -j SECMARK --selctx system_u:object_r:xen_server_packet_t
base -A selinux_new_input -p tcp --dport 7100 -j SECMARK --selctx system_u:object_r:xfs_server_packet_t
base -A selinux_new_input -p tcp --dport 6000:6020 -j SECMARK --selctx system_u:object_r:xserver_server_packet_t
base -A selinux_new_input -p tcp --dport 236 -j SECMARK --selctx system_u:object_r:zarafa_server_packet_t
base -A selinux_new_input -p tcp --dport 237 -j SECMARK --selctx system_u:object_r:zarafa_server_packet_t
base -A selinux_new_input -p tcp --dport 10051 -j SECMARK --selctx system_u:object_r:zabbix_server_packet_t
base -A selinux_new_input -p tcp --dport 10050 -j SECMARK --selctx system_u:object_r:zabbix_agent_server_packet_t
base -A selinux_new_input -p tcp --dport 2181 -j SECMARK --selctx system_u:object_r:zookeeper_client_server_packet_t
base -A selinux_new_input -p tcp --dport 3888 -j SECMARK --selctx system_u:object_r:zookeeper_election_server_packet_t
base -A selinux_new_input -p tcp --dport 2888 -j SECMARK --selctx system_u:object_r:zookeeper_leader_server_packet_t
base -A selinux_new_input -p tcp --dport 2600:2604 -j SECMARK --selctx system_u:object_r:zebra_server_packet_t
base -A selinux_new_input -p tcp --dport 2606 -j SECMARK --selctx system_u:object_r:zebra_server_packet_t
base -A selinux_new_input -p udp --dport 2600:2604 -j SECMARK --selctx system_u:object_r:zebra_server_packet_t
base -A selinux_new_input -p udp --dport 2606 -j SECMARK --selctx system_u:object_r:zebra_server_packet_t
base -A selinux_new_input -p tcp --dport 1229 -j SECMARK --selctx system_u:object_r:zented_server_packet_t
base -A selinux_new_input -p udp --dport 1229 -j SECMARK --selctx system_u:object_r:zented_server_packet_t
base -A selinux_new_input -p tcp --dport 8021 -j SECMARK --selctx system_u:object_r:zope_server_packet_t
post -A selinux_new_input -j CONNSECMARK --save
post -A selinux_new_input -j RETURN
base -A selinux_new_output -j SECMARK --selctx system_u:object_r:client_packet_t
base -A selinux_new_output -p icmp -j SECMARK --selctx system_u:object_r:icmp_packet_t
base -A selinux_new_output -p icmpv6 -j SECMARK --selctx system_u:object_r:icmp_packet_t
base -A selinux_new_output -p udp --dport 7007 -j SECMARK --selctx system_u:object_r:afs_bos_client_packet_t
base -A selinux_new_output -p tcp --dport 2040 -j SECMARK --selctx system_u:object_r:afs_fs_client_packet_t
base -A selinux_new_output -p udp --dport 7000 -j SECMARK --selctx system_u:object_r:afs_fs_client_packet_t
base -A selinux_new_output -p udp --dport 7005 -j SECMARK --selctx system_u:object_r:afs_fs_client_packet_t
base -A selinux_new_output -p udp --dport 7004 -j SECMARK --selctx system_u:object_r:afs_ka_client_packet_t
base -A selinux_new_output -p udp --dport 7002 -j SECMARK --selctx system_u:object_r:afs_pt_client_packet_t
base -A selinux_new_output -p udp --dport 7003 -j SECMARK --selctx system_u:object_r:afs_vl_client_packet_t
base -A selinux_new_output -p tcp --dport 7001 -j SECMARK --selctx system_u:object_r:afs3_callback_client_packet_t
base -A selinux_new_output -p udp --dport 7001 -j SECMARK --selctx system_u:object_r:afs3_callback_client_packet_t
base -A selinux_new_output -p udp --dport 705 -j SECMARK --selctx system_u:object_r:agentx_client_packet_t
base -A selinux_new_output -p tcp --dport 705 -j SECMARK --selctx system_u:object_r:agentx_client_packet_t
base -A selinux_new_output -p udp --dport 10080:10082 -j SECMARK --selctx system_u:object_r:amanda_client_packet_t
base -A selinux_new_output -p tcp --dport 10080:10083 -j SECMARK --selctx system_u:object_r:amanda_client_packet_t
base -A selinux_new_output -p tcp --dport 10024 -j SECMARK --selctx system_u:object_r:amavisd_recv_client_packet_t
base -A selinux_new_output -p tcp --dport 10025 -j SECMARK --selctx system_u:object_r:amavisd_send_client_packet_t
base -A selinux_new_output -p udp --dport 5671:5672 -j SECMARK --selctx system_u:object_r:amqp_client_packet_t
base -A selinux_new_output -p tcp --dport 5671:5672 -j SECMARK --selctx system_u:object_r:amqp_client_packet_t
base -A selinux_new_output -p udp --dport 5190:5193 -j SECMARK --selctx system_u:object_r:aol_client_packet_t
base -A selinux_new_output -p tcp --dport 5190:5193 -j SECMARK --selctx system_u:object_r:aol_client_packet_t
base -A selinux_new_output -p tcp --dport 3551 -j SECMARK --selctx system_u:object_r:apcupsd_client_packet_t
base -A selinux_new_output -p udp --dport 3551 -j SECMARK --selctx system_u:object_r:apcupsd_client_packet_t
base -A selinux_new_output -p tcp --dport 539 -j SECMARK --selctx system_u:object_r:apertus_ldp_client_packet_t
base -A selinux_new_output -p udp --dport 539 -j SECMARK --selctx system_u:object_r:apertus_ldp_client_packet_t
base -A selinux_new_output -p tcp --dport 3142 -j SECMARK --selctx system_u:object_r:aptcacher_client_packet_t
base -A selinux_new_output -p tcp --dport 9292 -j SECMARK --selctx system_u:object_r:armtechdaemon_client_packet_t
base -A selinux_new_output -p udp --dport 9292 -j SECMARK --selctx system_u:object_r:armtechdaemon_client_packet_t
base -A selinux_new_output -p tcp --dport 1720 -j SECMARK --selctx system_u:object_r:asterisk_client_packet_t
base -A selinux_new_output -p udp --dport 2427 -j SECMARK --selctx system_u:object_r:asterisk_client_packet_t
base -A selinux_new_output -p udp --dport 2727 -j SECMARK --selctx system_u:object_r:asterisk_client_packet_t
base -A selinux_new_output -p udp --dport 4569 -j SECMARK --selctx system_u:object_r:asterisk_client_packet_t
base -A selinux_new_output -p tcp --dport 60 -j SECMARK --selctx system_u:object_r:audit_client_packet_t
base -A selinux_new_output -p tcp --dport 113 -j SECMARK --selctx system_u:object_r:auth_client_packet_t
base -A selinux_new_output -p tcp --dport 179 -j SECMARK --selctx system_u:object_r:bgp_client_packet_t
base -A selinux_new_output -p udp --dport 179 -j SECMARK --selctx system_u:object_r:bgp_client_packet_t
base -A selinux_new_output -p tcp --dport 2605 -j SECMARK --selctx system_u:object_r:bgp_client_packet_t
base -A selinux_new_output -p udp --dport 2605 -j SECMARK --selctx system_u:object_r:bgp_client_packet_t
base -A selinux_new_output -p tcp --dport 31416 -j SECMARK --selctx system_u:object_r:boinc_client_packet_t
base -A selinux_new_output -p tcp --dport 1043 -j SECMARK --selctx system_u:object_r:boinc_client_client_packet_t
base -A selinux_new_output -p udp --dport 1034 -j SECMARK --selctx system_u:object_r:boinc_client_client_packet_t
base -A selinux_new_output -p tcp --dport 51235 -j SECMARK --selctx system_u:object_r:certmaster_client_packet_t
base -A selinux_new_output -p udp --dport 323 -j SECMARK --selctx system_u:object_r:chronyd_client_packet_t
base -A selinux_new_output -p tcp --dport 3310 -j SECMARK --selctx system_u:object_r:clamd_client_packet_t
base -A selinux_new_output -p udp --dport 4041 -j SECMARK --selctx system_u:object_r:clockspeed_client_packet_t
base -A selinux_new_output -p tcp --dport 5149 -j SECMARK --selctx system_u:object_r:cluster_client_packet_t
base -A selinux_new_output -p udp --dport 5149 -j SECMARK --selctx system_u:object_r:cluster_client_packet_t
base -A selinux_new_output -p tcp --dport 40040 -j SECMARK --selctx system_u:object_r:cluster_client_packet_t
base -A selinux_new_output -p tcp --dport 50006:50008 -j SECMARK --selctx system_u:object_r:cluster_client_packet_t
base -A selinux_new_output -p udp --dport 50006:50008 -j SECMARK --selctx system_u:object_r:cluster_client_packet_t
base -A selinux_new_output -p tcp --dport 1050 -j SECMARK --selctx system_u:object_r:cma_client_packet_t
base -A selinux_new_output -p udp --dport 1050 -j SECMARK --selctx system_u:object_r:cma_client_packet_t
base -A selinux_new_output -p tcp --dport 25151 -j SECMARK --selctx system_u:object_r:cobbler_client_packet_t
base -A selinux_new_output -p tcp --dport 5001 -j SECMARK --selctx system_u:object_r:commplex_link_client_packet_t
base -A selinux_new_output -p udp --dport 5001 -j SECMARK --selctx system_u:object_r:commplex_link_client_packet_t
base -A selinux_new_output -p tcp --dport 5000 -j SECMARK --selctx system_u:object_r:commplex_main_client_packet_t
base -A selinux_new_output -p udp --dport 5000 -j SECMARK --selctx system_u:object_r:commplex_main_client_packet_t
base -A selinux_new_output -p udp --dport 512 -j SECMARK --selctx system_u:object_r:comsat_client_packet_t
base -A selinux_new_output -p tcp --dport 9618 -j SECMARK --selctx system_u:object_r:condor_client_packet_t
base -A selinux_new_output -p udp --dport 9618 -j SECMARK --selctx system_u:object_r:condor_client_packet_t
base -A selinux_new_output -p tcp --dport 5984 -j SECMARK --selctx system_u:object_r:couchdb_client_packet_t
base -A selinux_new_output -p udp --dport 5984 -j SECMARK --selctx system_u:object_r:couchdb_client_packet_t
base -A selinux_new_output -p tcp --dport 9000 -j SECMARK --selctx system_u:object_r:cslistener_client_packet_t
base -A selinux_new_output -p udp --dport 9000 -j SECMARK --selctx system_u:object_r:cslistener_client_packet_t
base -A selinux_new_output -p tcp --dport 4379 -j SECMARK --selctx system_u:object_r:ctdb_client_packet_t
base -A selinux_new_output -p udp --dport 4397 -j SECMARK --selctx system_u:object_r:ctdb_client_packet_t
base -A selinux_new_output -p tcp --dport 2401 -j SECMARK --selctx system_u:object_r:cvs_client_packet_t
base -A selinux_new_output -p udp --dport 2401 -j SECMARK --selctx system_u:object_r:cvs_client_packet_t
base -A selinux_new_output -p tcp --dport 6767 -j SECMARK --selctx system_u:object_r:cyphesis_client_packet_t
base -A selinux_new_output -p tcp --dport 6769 -j SECMARK --selctx system_u:object_r:cyphesis_client_packet_t
base -A selinux_new_output -p tcp --dport 6780:6799 -j SECMARK --selctx system_u:object_r:cyphesis_client_packet_t
base -A selinux_new_output -p udp --dport 32771 -j SECMARK --selctx system_u:object_r:cyphesis_client_packet_t
base -A selinux_new_output -p tcp --dport 3689 -j SECMARK --selctx system_u:object_r:daap_client_packet_t
base -A selinux_new_output -p udp --dport 3689 -j SECMARK --selctx system_u:object_r:daap_client_packet_t
base -A selinux_new_output -p tcp --dport 1178 -j SECMARK --selctx system_u:object_r:dbskkd_client_packet_t
base -A selinux_new_output -p udp --dport 6276 -j SECMARK --selctx system_u:object_r:dcc_client_packet_t
base -A selinux_new_output -p udp --dport 6277 -j SECMARK --selctx system_u:object_r:dcc_client_packet_t
base -A selinux_new_output -p tcp --dport 5679 -j SECMARK --selctx system_u:object_r:dccm_client_packet_t
base -A selinux_new_output -p udp --dport 5679 -j SECMARK --selctx system_u:object_r:dccm_client_packet_t
base -A selinux_new_output -p udp --dport 68 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p tcp --dport 68 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p udp --dport 546 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p tcp --dport 546 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p udp --dport 5546 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p tcp --dport 5546 -j SECMARK --selctx system_u:object_r:dhcpc_client_packet_t
base -A selinux_new_output -p udp --dport 67 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p udp --dport 547 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 547 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p udp --dport 548 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 548 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 647 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p udp --dport 647 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 847 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p udp --dport 847 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 7911 -j SECMARK --selctx system_u:object_r:dhcpd_client_packet_t
base -A selinux_new_output -p tcp --dport 2628 -j SECMARK --selctx system_u:object_r:dict_client_packet_t
base -A selinux_new_output -p tcp --dport 3632 -j SECMARK --selctx system_u:object_r:distccd_client_packet_t
base -A selinux_new_output -p tcp --dport 53 -j SECMARK --selctx system_u:object_r:dns_client_packet_t
base -A selinux_new_output -p udp --dport 53 -j SECMARK --selctx system_u:object_r:dns_client_packet_t
base -A selinux_new_output -p tcp --dport 853 -j SECMARK --selctx system_u:object_r:dns_client_packet_t
base -A selinux_new_output -p tcp --dport 17500 -j SECMARK --selctx system_u:object_r:dropbox_client_packet_t
base -A selinux_new_output -p udp --dport 17500 -j SECMARK --selctx system_u:object_r:dropbox_client_packet_t
base -A selinux_new_output -p tcp --dport 520 -j SECMARK --selctx system_u:object_r:efs_client_packet_t
base -A selinux_new_output -p tcp --dport 3198 -j SECMARK --selctx system_u:object_r:embrace_dp_c_client_packet_t
base -A selinux_new_output -p udp --dport 3198 -j SECMARK --selctx system_u:object_r:embrace_dp_c_client_packet_t
base -A selinux_new_output -p tcp --dport 135 -j SECMARK --selctx system_u:object_r:epmap_client_packet_t
base -A selinux_new_output -p udp --dport 135 -j SECMARK --selctx system_u:object_r:epmap_client_packet_t
base -A selinux_new_output -p tcp --dport 4369 -j SECMARK --selctx system_u:object_r:epmd_client_packet_t
base -A selinux_new_output -p udp --dport 4369 -j SECMARK --selctx system_u:object_r:epmd_client_packet_t
base -A selinux_new_output -p tcp --dport 79 -j SECMARK --selctx system_u:object_r:fingerd_client_packet_t
base -A selinux_new_output -p tcp --dport 21 -j SECMARK --selctx system_u:object_r:ftp_client_packet_t
base -A selinux_new_output -p tcp --dport 990 -j SECMARK --selctx system_u:object_r:ftp_client_packet_t
base -A selinux_new_output -p udp --dport 990 -j SECMARK --selctx system_u:object_r:ftp_client_packet_t
base -A selinux_new_output -p tcp --dport 20 -j SECMARK --selctx system_u:object_r:ftp_data_client_packet_t
base -A selinux_new_output -p udp --dport 1718 -j SECMARK --selctx system_u:object_r:gatekeeper_client_packet_t
base -A selinux_new_output -p udp --dport 1719 -j SECMARK --selctx system_u:object_r:gatekeeper_client_packet_t
base -A selinux_new_output -p tcp --dport 1721 -j SECMARK --selctx system_u:object_r:gatekeeper_client_packet_t
base -A selinux_new_output -p tcp --dport 7000 -j SECMARK --selctx system_u:object_r:gatekeeper_client_packet_t
base -A selinux_new_output -p tcp --dport 538 -j SECMARK --selctx system_u:object_r:gdomap_client_packet_t
base -A selinux_new_output -p udp --dport 538 -j SECMARK --selctx system_u:object_r:gdomap_client_packet_t
base -A selinux_new_output -p tcp --dport 3050 -j SECMARK --selctx system_u:object_r:gds_db_client_packet_t
base -A selinux_new_output -p udp --dport 3050 -j SECMARK --selctx system_u:object_r:gds_db_client_packet_t
base -A selinux_new_output -p tcp --dport 9418 -j SECMARK --selctx system_u:object_r:git_client_packet_t
base -A selinux_new_output -p udp --dport 9418 -j SECMARK --selctx system_u:object_r:git_client_packet_t
base -A selinux_new_output -p tcp --dport 9191 -j SECMARK --selctx system_u:object_r:glance_registry_client_packet_t
base -A selinux_new_output -p udp --dport 9191 -j SECMARK --selctx system_u:object_r:glance_registry_client_packet_t
base -A selinux_new_output -p tcp --dport 70 -j SECMARK --selctx system_u:object_r:gopher_client_packet_t
base -A selinux_new_output -p udp --dport 70 -j SECMARK --selctx system_u:object_r:gopher_client_packet_t
base -A selinux_new_output -p tcp --dport 2947 -j SECMARK --selctx system_u:object_r:gpsd_client_packet_t
base -A selinux_new_output -p tcp --dport 50010 -j SECMARK --selctx system_u:object_r:hadoop_datanode_client_packet_t
base -A selinux_new_output -p tcp --dport 8020 -j SECMARK --selctx system_u:object_r:hadoop_namenode_client_packet_t
base -A selinux_new_output -p tcp --dport 7634 -j SECMARK --selctx system_u:object_r:hddtemp_client_packet_t
base -A selinux_new_output -p tcp --dport 5335 -j SECMARK --selctx system_u:object_r:howl_client_packet_t
base -A selinux_new_output -p udp --dport 5353 -j SECMARK --selctx system_u:object_r:howl_client_packet_t
base -A selinux_new_output -p tcp --dport 1782 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 2207 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 2208 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 8290 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 50000 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 50002 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 8292 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9100 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9101 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9102 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9220 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9221 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9222 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9280 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9281 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9282 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9290 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 9291 -j SECMARK --selctx system_u:object_r:hplip_client_packet_t
base -A selinux_new_output -p tcp --dport 80 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 443 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 488 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 8008 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 8009 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 8443 -j SECMARK --selctx system_u:object_r:http_client_packet_t
base -A selinux_new_output -p tcp --dport 3128 -j SECMARK --selctx system_u:object_r:http_cache_client_packet_t
base -A selinux_new_output -p udp --dport 3130 -j SECMARK --selctx system_u:object_r:http_cache_client_packet_t
base -A selinux_new_output -p tcp --dport 8080 -j SECMARK --selctx system_u:object_r:http_cache_client_packet_t
base -A selinux_new_output -p tcp --dport 8118 -j SECMARK --selctx system_u:object_r:http_cache_client_packet_t
base -A selinux_new_output -p tcp --dport 10001:10010 -j SECMARK --selctx system_u:object_r:http_cache_client_packet_t
base -A selinux_new_output -p tcp --dport 9010 -j SECMARK --selctx system_u:object_r:i18n_input_client_packet_t
base -A selinux_new_output -p tcp --dport 5323 -j SECMARK --selctx system_u:object_r:imaze_client_packet_t
base -A selinux_new_output -p udp --dport 5323 -j SECMARK --selctx system_u:object_r:imaze_client_packet_t
base -A selinux_new_output -p tcp --dport 1 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 1 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 7 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 7 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 9 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 9 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 13 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 13 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 19 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 19 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 37 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 37 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 512 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 543 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 544 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 891 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 891 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 892 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p udp --dport 892 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 2105 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 5666 -j SECMARK --selctx system_u:object_r:inetd_child_client_packet_t
base -A selinux_new_output -p tcp --dport 119 -j SECMARK --selctx system_u:object_r:innd_client_packet_t
base -A selinux_new_output -p tcp --dport 7778 -j SECMARK --selctx system_u:object_r:interwise_client_packet_t
base -A selinux_new_output -p udp --dport 7778 -j SECMARK --selctx system_u:object_r:interwise_client_packet_t
base -A selinux_new_output -p tcp --dport 7410 -j SECMARK --selctx system_u:object_r:ionixnetmon_client_packet_t
base -A selinux_new_output -p udp --dport 7410 -j SECMARK --selctx system_u:object_r:ionixnetmon_client_packet_t
base -A selinux_new_output -p udp --dport 623 -j SECMARK --selctx system_u:object_r:ipmi_client_packet_t
base -A selinux_new_output -p udp --dport 664 -j SECMARK --selctx system_u:object_r:ipmi_client_packet_t
base -A selinux_new_output -p tcp --dport 631 -j SECMARK --selctx system_u:object_r:ipp_client_packet_t
base -A selinux_new_output -p udp --dport 631 -j SECMARK --selctx system_u:object_r:ipp_client_packet_t
base -A selinux_new_output -p tcp --dport 8610:8614 -j SECMARK --selctx system_u:object_r:ipp_client_packet_t
base -A selinux_new_output -p udp --dport 8610:8614 -j SECMARK --selctx system_u:object_r:ipp_client_packet_t
base -A selinux_new_output -p tcp --dport 4500 -j SECMARK --selctx system_u:object_r:ipsecnat_client_packet_t
base -A selinux_new_output -p udp --dport 4500 -j SECMARK --selctx system_u:object_r:ipsecnat_client_packet_t
base -A selinux_new_output -p tcp --dport 6665 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p tcp --dport 6666 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p tcp --dport 6667 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p tcp --dport 6668 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p tcp --dport 6669 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p tcp --dport 6697 -j SECMARK --selctx system_u:object_r:ircd_client_packet_t
base -A selinux_new_output -p udp --dport 500 -j SECMARK --selctx system_u:object_r:isakmp_client_packet_t
base -A selinux_new_output -p tcp --dport 3260 -j SECMARK --selctx system_u:object_r:iscsi_client_packet_t
base -A selinux_new_output -p tcp --dport 3205 -j SECMARK --selctx system_u:object_r:isns_client_packet_t
base -A selinux_new_output -p udp --dport 3205 -j SECMARK --selctx system_u:object_r:isns_client_packet_t
base -A selinux_new_output -p tcp --dport 5222 -j SECMARK --selctx system_u:object_r:jabber_client_client_packet_t
base -A selinux_new_output -p tcp --dport 5223 -j SECMARK --selctx system_u:object_r:jabber_client_client_packet_t
base -A selinux_new_output -p tcp --dport 5269 -j SECMARK --selctx system_u:object_r:jabber_interserver_client_packet_t
base -A selinux_new_output -p tcp --dport 3528 -j SECMARK --selctx system_u:object_r:jboss_iiop_client_packet_t
base -A selinux_new_output -p udp --dport 3528 -j SECMARK --selctx system_u:object_r:jboss_iiop_client_packet_t
base -A selinux_new_output -p tcp --dport 88 -j SECMARK --selctx system_u:object_r:kerberos_client_packet_t
base -A selinux_new_output -p udp --dport 88 -j SECMARK --selctx system_u:object_r:kerberos_client_packet_t
base -A selinux_new_output -p tcp --dport 750 -j SECMARK --selctx system_u:object_r:kerberos_client_packet_t
base -A selinux_new_output -p udp --dport 750 -j SECMARK --selctx system_u:object_r:kerberos_client_packet_t
base -A selinux_new_output -p tcp --dport 464 -j SECMARK --selctx system_u:object_r:kerberos_admin_client_packet_t
base -A selinux_new_output -p udp --dport 464 -j SECMARK --selctx system_u:object_r:kerberos_admin_client_packet_t
base -A selinux_new_output -p tcp --dport 749 -j SECMARK --selctx system_u:object_r:kerberos_admin_client_packet_t
base -A selinux_new_output -p tcp --dport 4444 -j SECMARK --selctx system_u:object_r:kerberos_master_client_packet_t
base -A selinux_new_output -p udp --dport 4444 -j SECMARK --selctx system_u:object_r:kerberos_master_client_packet_t
base -A selinux_new_output -p tcp --dport 2501 -j SECMARK --selctx system_u:object_r:kismet_client_packet_t
base -A selinux_new_output -p tcp --dport 754 -j SECMARK --selctx system_u:object_r:kprop_client_packet_t
base -A selinux_new_output -p udp --dport 517 -j SECMARK --selctx system_u:object_r:ktalkd_client_packet_t
base -A selinux_new_output -p udp --dport 518 -j SECMARK --selctx system_u:object_r:ktalkd_client_packet_t
base -A selinux_new_output -p tcp --dport 1701 -j SECMARK --selctx system_u:object_r:l2tp_client_packet_t
base -A selinux_new_output -p udp --dport 1701 -j SECMARK --selctx system_u:object_r:l2tp_client_packet_t
base -A selinux_new_output -p tcp --dport 389 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p udp --dport 389 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p tcp --dport 636 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p udp --dport 636 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p tcp --dport 3268 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p tcp --dport 3269 -j SECMARK --selctx system_u:object_r:ldap_client_packet_t
base -A selinux_new_output -p tcp --dport 8765 -j SECMARK --selctx system_u:object_r:lirc_client_packet_t
base -A selinux_new_output -p tcp --dport 5355 -j SECMARK --selctx system_u:object_r:llmnr_client_packet_t
base -A selinux_new_output -p udp --dport 5355 -j SECMARK --selctx system_u:object_r:llmnr_client_packet_t
base -A selinux_new_output -p tcp --dport 24 -j SECMARK --selctx system_u:object_r:lmtp_client_packet_t
base -A selinux_new_output -p udp --dport 24 -j SECMARK --selctx system_u:object_r:lmtp_client_packet_t
base -A selinux_new_output -p tcp --dport 2000 -j SECMARK --selctx system_u:object_r:mail_client_packet_t
base -A selinux_new_output -p tcp --dport 3905 -j SECMARK --selctx system_u:object_r:mail_client_packet_t
base -A selinux_new_output -p tcp --dport 49000 -j SECMARK --selctx system_u:object_r:matahari_client_packet_t
base -A selinux_new_output -p udp --dport 49000 -j SECMARK --selctx system_u:object_r:matahari_client_packet_t
base -A selinux_new_output -p tcp --dport 11211 -j SECMARK --selctx system_u:object_r:memcache_client_packet_t
base -A selinux_new_output -p udp --dport 11211 -j SECMARK --selctx system_u:object_r:memcache_client_packet_t
base -A selinux_new_output -p tcp --dport 5050 -j SECMARK --selctx system_u:object_r:mmcc_client_packet_t
base -A selinux_new_output -p udp --dport 5050 -j SECMARK --selctx system_u:object_r:mmcc_client_packet_t
base -A selinux_new_output -p tcp --dport 2583 -j SECMARK --selctx system_u:object_r:mon_client_packet_t
base -A selinux_new_output -p udp --dport 2583 -j SECMARK --selctx system_u:object_r:mon_client_packet_t
base -A selinux_new_output -p tcp --dport 2812 -j SECMARK --selctx system_u:object_r:monit_client_packet_t
base -A selinux_new_output -p tcp --dport 1234 -j SECMARK --selctx system_u:object_r:monopd_client_packet_t
base -A selinux_new_output -p tcp --dport 20048 -j SECMARK --selctx system_u:object_r:mountd_client_packet_t
base -A selinux_new_output -p udp --dport 20048 -j SECMARK --selctx system_u:object_r:mountd_client_packet_t
base -A selinux_new_output -p tcp --dport 5252 -j SECMARK --selctx system_u:object_r:movaz_ssc_client_packet_t
base -A selinux_new_output -p udp --dport 5252 -j SECMARK --selctx system_u:object_r:movaz_ssc_client_packet_t
base -A selinux_new_output -p tcp --dport 6600 -j SECMARK --selctx system_u:object_r:mpd_client_packet_t
base -A selinux_new_output -p tcp --dport 8787 -j SECMARK --selctx system_u:object_r:msgsrvr_client_packet_t
base -A selinux_new_output -p udp --dport 8787 -j SECMARK --selctx system_u:object_r:msgsrvr_client_packet_t
base -A selinux_new_output -p tcp --dport 1863 -j SECMARK --selctx system_u:object_r:msnp_client_packet_t
base -A selinux_new_output -p udp --dport 1863 -j SECMARK --selctx system_u:object_r:msnp_client_packet_t
base -A selinux_new_output -p tcp --dport 1433:1434 -j SECMARK --selctx system_u:object_r:mssql_client_packet_t
base -A selinux_new_output -p udp --dport 1433:1434 -j SECMARK --selctx system_u:object_r:mssql_client_packet_t
base -A selinux_new_output -p tcp --dport 1755 -j SECMARK --selctx system_u:object_r:ms_streaming_client_packet_t
base -A selinux_new_output -p udp --dport 1755 -j SECMARK --selctx system_u:object_r:ms_streaming_client_packet_t
base -A selinux_new_output -p tcp --dport 4949 -j SECMARK --selctx system_u:object_r:munin_client_packet_t
base -A selinux_new_output -p udp --dport 4949 -j SECMARK --selctx system_u:object_r:munin_client_packet_t
base -A selinux_new_output -p tcp --dport 8005 -j SECMARK --selctx system_u:object_r:mxi_client_packet_t
base -A selinux_new_output -p udp --dport 8005 -j SECMARK --selctx system_u:object_r:mxi_client_packet_t
base -A selinux_new_output -p tcp --dport 1186 -j SECMARK --selctx system_u:object_r:mysqld_client_packet_t
base -A selinux_new_output -p tcp --dport 3306 -j SECMARK --selctx system_u:object_r:mysqld_client_packet_t
base -A selinux_new_output -p tcp --dport 63132:63164 -j SECMARK --selctx system_u:object_r:mysqld_client_packet_t
base -A selinux_new_output -p tcp --dport 2273 -j SECMARK --selctx system_u:object_r:mysqlmanagerd_client_packet_t
base -A selinux_new_output -p tcp --dport 1241 -j SECMARK --selctx system_u:object_r:nessus_client_packet_t
base -A selinux_new_output -p tcp --dport 3129 -j SECMARK --selctx system_u:object_r:netport_client_packet_t
base -A selinux_new_output -p udp --dport 3129 -j SECMARK --selctx system_u:object_r:netport_client_packet_t
base -A selinux_new_output -p tcp --dport 5404 -j SECMARK --selctx system_u:object_r:netsupport_client_packet_t
base -A selinux_new_output -p udp --dport 5404 -j SECMARK --selctx system_u:object_r:netsupport_client_packet_t
base -A selinux_new_output -p tcp --dport 5405 -j SECMARK --selctx system_u:object_r:netsupport_client_packet_t
base -A selinux_new_output -p udp --dport 5405 -j SECMARK --selctx system_u:object_r:netsupport_client_packet_t
base -A selinux_new_output -p tcp --dport 2049 -j SECMARK --selctx system_u:object_r:nfs_client_packet_t
base -A selinux_new_output -p udp --dport 2049 -j SECMARK --selctx system_u:object_r:nfs_client_packet_t
base -A selinux_new_output -p tcp --dport 20049 -j SECMARK --selctx system_u:object_r:nfsrdma_client_packet_t
base -A selinux_new_output -p udp --dport 20049 -j SECMARK --selctx system_u:object_r:nfsrdma_client_packet_t
base -A selinux_new_output -p udp --dport 137 -j SECMARK --selctx system_u:object_r:nmbd_client_packet_t
base -A selinux_new_output -p udp --dport 138 -j SECMARK --selctx system_u:object_r:nmbd_client_packet_t
base -A selinux_new_output -p tcp --dport 3000:3001 -j SECMARK --selctx system_u:object_r:ntop_client_packet_t
base -A selinux_new_output -p udp --dport 3000:3001 -j SECMARK --selctx system_u:object_r:ntop_client_packet_t
base -A selinux_new_output -p udp --dport 123 -j SECMARK --selctx system_u:object_r:ntp_client_packet_t
base -A selinux_new_output -p tcp --dport 8022 -j SECMARK --selctx system_u:object_r:oa_system_client_packet_t
base -A selinux_new_output -p udp --dport 8022 -j SECMARK --selctx system_u:object_r:oa_system_client_packet_t
base -A selinux_new_output -p tcp --dport 1521 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p udp --dport 1521 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p tcp --dport 2483 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p udp --dport 2483 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p tcp --dport 2484 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p udp --dport 2484 -j SECMARK --selctx system_u:object_r:oracledb_client_packet_t
base -A selinux_new_output -p tcp --dport 9080 -j SECMARK --selctx system_u:object_r:ocsp_client_packet_t
base -A selinux_new_output -p tcp --dport 4743 -j SECMARK --selctx system_u:object_r:openhpid_client_packet_t
base -A selinux_new_output -p udp --dport 4743 -j SECMARK --selctx system_u:object_r:openhpid_client_packet_t
base -A selinux_new_output -p tcp --dport 1194 -j SECMARK --selctx system_u:object_r:openvpn_client_packet_t
base -A selinux_new_output -p udp --dport 1194 -j SECMARK --selctx system_u:object_r:openvpn_client_packet_t
base -A selinux_new_output -p tcp --dport 1314 -j SECMARK --selctx system_u:object_r:pdps_client_packet_t
base -A selinux_new_output -p udp --dport 1314 -j SECMARK --selctx system_u:object_r:pdps_client_packet_t
base -A selinux_new_output -p tcp --dport 5988 -j SECMARK --selctx system_u:object_r:pegasus_http_client_packet_t
base -A selinux_new_output -p tcp --dport 5989 -j SECMARK --selctx system_u:object_r:pegasus_https_client_packet_t
base -A selinux_new_output -p udp --dport 11371 -j SECMARK --selctx system_u:object_r:pgpkeyserver_client_packet_t
base -A selinux_new_output -p tcp --dport 11371 -j SECMARK --selctx system_u:object_r:pgpkeyserver_client_packet_t
base -A selinux_new_output -p tcp --dport 9125 -j SECMARK --selctx system_u:object_r:pingd_client_packet_t
base -A selinux_new_output -p tcp --dport 2126 -j SECMARK --selctx system_u:object_r:pktcable_cops_client_packet_t
base -A selinux_new_output -p udp --dport 2126 -j SECMARK --selctx system_u:object_r:pktcable_cops_client_packet_t
base -A selinux_new_output -p tcp --dport 106 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 109 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 110 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 143 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 220 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 993 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 995 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p tcp --dport 1109 -j SECMARK --selctx system_u:object_r:pop_client_packet_t
base -A selinux_new_output -p udp --dport 111 -j SECMARK --selctx system_u:object_r:portmap_client_packet_t
base -A selinux_new_output -p tcp --dport 111 -j SECMARK --selctx system_u:object_r:portmap_client_packet_t
base -A selinux_new_output -p tcp --dport 10031 -j SECMARK --selctx system_u:object_r:postfix_policyd_client_packet_t
base -A selinux_new_output -p tcp --dport 5432 -j SECMARK --selctx system_u:object_r:postgresql_client_packet_t
base -A selinux_new_output -p tcp --dport 10023 -j SECMARK --selctx system_u:object_r:postgrey_client_packet_t
base -A selinux_new_output -p tcp --dport 60000 -j SECMARK --selctx system_u:object_r:postgrey_client_packet_t
base -A selinux_new_output -p tcp --dport 1723 -j SECMARK --selctx system_u:object_r:pptp_client_packet_t
base -A selinux_new_output -p udp --dport 1723 -j SECMARK --selctx system_u:object_r:pptp_client_packet_t
base -A selinux_new_output -p tcp --dport 4690 -j SECMARK --selctx system_u:object_r:prelude_client_packet_t
base -A selinux_new_output -p udp --dport 4690 -j SECMARK --selctx system_u:object_r:prelude_client_packet_t
base -A selinux_new_output -p tcp --dport 5298:5299 -j SECMARK --selctx system_u:object_r:presence_client_packet_t
base -A selinux_new_output -p udp --dport 5298:5299 -j SECMARK --selctx system_u:object_r:presence_client_packet_t
base -A selinux_new_output -p tcp --dport 515 -j SECMARK --selctx system_u:object_r:printer_client_packet_t
base -A selinux_new_output -p tcp --dport 5703 -j SECMARK --selctx system_u:object_r:ptal_client_packet_t
base -A selinux_new_output -p tcp --dport 4713 -j SECMARK --selctx system_u:object_r:pulseaudio_client_packet_t
base -A selinux_new_output -p tcp --dport 8140 -j SECMARK --selctx system_u:object_r:puppet_client_packet_t
base -A selinux_new_output -p udp --dport 4011 -j SECMARK --selctx system_u:object_r:pxe_client_packet_t
base -A selinux_new_output -p udp --dport 24441 -j SECMARK --selctx system_u:object_r:pyzor_client_packet_t
base -A selinux_new_output -p udp --dport 1646 -j SECMARK --selctx system_u:object_r:radacct_client_packet_t
base -A selinux_new_output -p udp --dport 1813 -j SECMARK --selctx system_u:object_r:radacct_client_packet_t
base -A selinux_new_output -p udp --dport 1645 -j SECMARK --selctx system_u:object_r:radius_client_packet_t
base -A selinux_new_output -p udp --dport 1812 -j SECMARK --selctx system_u:object_r:radius_client_packet_t
base -A selinux_new_output -p tcp --dport 2083 -j SECMARK --selctx system_u:object_r:radsec_client_packet_t
base -A selinux_new_output -p tcp --dport 2703 -j SECMARK --selctx system_u:object_r:razor_client_packet_t
base -A selinux_new_output -p tcp --dport 6379 -j SECMARK --selctx system_u:object_r:redis_client_packet_t
base -A selinux_new_output -p tcp --dport 26379 -j SECMARK --selctx system_u:object_r:redis_client_packet_t
base -A selinux_new_output -p tcp --dport 6363 -j SECMARK --selctx system_u:object_r:repository_client_packet_t
base -A selinux_new_output -p tcp --dport 11111 -j SECMARK --selctx system_u:object_r:ricci_client_packet_t
base -A selinux_new_output -p udp --dport 11111 -j SECMARK --selctx system_u:object_r:ricci_client_packet_t
base -A selinux_new_output -p tcp --dport 16851 -j SECMARK --selctx system_u:object_r:ricci_modcluster_client_packet_t
base -A selinux_new_output -p udp --dport 16851 -j SECMARK --selctx system_u:object_r:ricci_modcluster_client_packet_t
base -A selinux_new_output -p tcp --dport 513 -j SECMARK --selctx system_u:object_r:rlogind_client_packet_t
base -A selinux_new_output -p tcp --dport 953 -j SECMARK --selctx system_u:object_r:rndc_client_packet_t
base -A selinux_new_output -p udp --dport 953 -j SECMARK --selctx system_u:object_r:rndc_client_packet_t
base -A selinux_new_output -p tcp --dport 8953 -j SECMARK --selctx system_u:object_r:rndc_client_packet_t
base -A selinux_new_output -p udp --dport 8953 -j SECMARK --selctx system_u:object_r:rndc_client_packet_t
base -A selinux_new_output -p udp --dport 520 -j SECMARK --selctx system_u:object_r:router_client_packet_t
base -A selinux_new_output -p udp --dport 521 -j SECMARK --selctx system_u:object_r:router_client_packet_t
base -A selinux_new_output -p tcp --dport 521 -j SECMARK --selctx system_u:object_r:router_client_packet_t
base -A selinux_new_output -p tcp --dport 514 -j SECMARK --selctx system_u:object_r:rsh_client_packet_t
base -A selinux_new_output -p tcp --dport 873 -j SECMARK --selctx system_u:object_r:rsync_client_packet_t
base -A selinux_new_output -p udp --dport 873 -j SECMARK --selctx system_u:object_r:rsync_client_packet_t
base -A selinux_new_output -p tcp --dport 554 -j SECMARK --selctx system_u:object_r:rtsp_client_packet_t
base -A selinux_new_output -p udp --dport 554 -j SECMARK --selctx system_u:object_r:rtsp_client_packet_t
base -A selinux_new_output -p udp --dport 513 -j SECMARK --selctx system_u:object_r:rwho_client_packet_t
base -A selinux_new_output -p tcp --dport 9875 -j SECMARK --selctx system_u:object_r:sap_client_packet_t
base -A selinux_new_output -p udp --dport 9875 -j SECMARK --selctx system_u:object_r:sap_client_packet_t
base -A selinux_new_output -p tcp --dport 3636 -j SECMARK --selctx system_u:object_r:servistaitsm_client_packet_t
base -A selinux_new_output -p udp --dport 3636 -j SECMARK --selctx system_u:object_r:servistaitsm_client_packet_t
base -A selinux_new_output -p tcp --dport 4190 -j SECMARK --selctx system_u:object_r:sieve_client_packet_t
base -A selinux_new_output -p tcp --dport 5060 -j SECMARK --selctx system_u:object_r:sip_client_packet_t
base -A selinux_new_output -p udp --dport 5060 -j SECMARK --selctx system_u:object_r:sip_client_packet_t
base -A selinux_new_output -p tcp --dport 5061 -j SECMARK --selctx system_u:object_r:sip_client_packet_t
base -A selinux_new_output -p udp --dport 5061 -j SECMARK --selctx system_u:object_r:sip_client_packet_t
base -A selinux_new_output -p tcp --dport 3874 -j SECMARK --selctx system_u:object_r:sixxsconfig_client_packet_t
base -A selinux_new_output -p udp --dport 3874 -j SECMARK --selctx system_u:object_r:sixxsconfig_client_packet_t
base -A selinux_new_output -p tcp --dport 137:139 -j SECMARK --selctx system_u:object_r:smbd_client_packet_t
base -A selinux_new_output -p tcp --dport 445 -j SECMARK --selctx system_u:object_r:smbd_client_packet_t
base -A selinux_new_output -p tcp --dport 25 -j SECMARK --selctx system_u:object_r:smtp_client_packet_t
base -A selinux_new_output -p tcp --dport 465 -j SECMARK --selctx system_u:object_r:smtp_client_packet_t
base -A selinux_new_output -p tcp --dport 587 -j SECMARK --selctx system_u:object_r:smtp_client_packet_t
base -A selinux_new_output -p udp --dport 161 -j SECMARK --selctx system_u:object_r:snmp_client_packet_t
base -A selinux_new_output -p udp --dport 162 -j SECMARK --selctx system_u:object_r:snmp_client_packet_t
base -A selinux_new_output -p tcp --dport 199 -j SECMARK --selctx system_u:object_r:snmp_client_packet_t
base -A selinux_new_output -p tcp --dport 1161 -j SECMARK --selctx system_u:object_r:snmp_client_packet_t
base -A selinux_new_output -p tcp --dport 8000 -j SECMARK --selctx system_u:object_r:soundd_client_packet_t
base -A selinux_new_output -p tcp --dport 9433 -j SECMARK --selctx system_u:object_r:soundd_client_packet_t
base -A selinux_new_output -p tcp --dport 16001 -j SECMARK --selctx system_u:object_r:soundd_client_packet_t
base -A selinux_new_output -p tcp --dport 783 -j SECMARK --selctx system_u:object_r:spamd_client_packet_t
base -A selinux_new_output -p tcp --dport 8036 -j SECMARK --selctx system_u:object_r:speech_client_packet_t
base -A selinux_new_output -p udp --dport 3401 -j SECMARK --selctx system_u:object_r:squid_client_packet_t
base -A selinux_new_output -p tcp --dport 3401 -j SECMARK --selctx system_u:object_r:squid_client_packet_t
base -A selinux_new_output -p udp --dport 4827 -j SECMARK --selctx system_u:object_r:squid_client_packet_t
base -A selinux_new_output -p tcp --dport 4827 -j SECMARK --selctx system_u:object_r:squid_client_packet_t
base -A selinux_new_output -p tcp --dport 1900 -j SECMARK --selctx system_u:object_r:ssdp_client_packet_t
base -A selinux_new_output -p udp --dport 1900 -j SECMARK --selctx system_u:object_r:ssdp_client_packet_t
base -A selinux_new_output -p tcp --dport 22 -j SECMARK --selctx system_u:object_r:ssh_client_packet_t
base -A selinux_new_output -p tcp --dport 3690 -j SECMARK --selctx system_u:object_r:svn_client_packet_t
base -A selinux_new_output -p udp --dport 3690 -j SECMARK --selctx system_u:object_r:svn_client_packet_t
base -A selinux_new_output -p tcp --dport 427 -j SECMARK --selctx system_u:object_r:svrloc_client_packet_t
base -A selinux_new_output -p udp --dport 427 -j SECMARK --selctx system_u:object_r:svrloc_client_packet_t
base -A selinux_new_output -p tcp --dport 901 -j SECMARK --selctx system_u:object_r:swat_client_packet_t
base -A selinux_new_output -p tcp --dport 22000 -j SECMARK --selctx system_u:object_r:syncthing_client_packet_t
base -A selinux_new_output -p tcp --dport 8384 -j SECMARK --selctx system_u:object_r:syncthing_admin_client_packet_t
base -A selinux_new_output -p udp --dport 21027 -j SECMARK --selctx system_u:object_r:syncthing_discovery_client_packet_t
base -A selinux_new_output -p tcp --dport 9911 -j SECMARK --selctx system_u:object_r:sype_transport_client_packet_t
base -A selinux_new_output -p udp --dport 9911 -j SECMARK --selctx system_u:object_r:sype_transport_client_packet_t
base -A selinux_new_output -p udp --dport 514 -j SECMARK --selctx system_u:object_r:syslogd_client_packet_t
base -A selinux_new_output -p tcp --dport 6514 -j SECMARK --selctx system_u:object_r:syslog_tls_client_packet_t
base -A selinux_new_output -p udp --dport 6514 -j SECMARK --selctx system_u:object_r:syslog_tls_client_packet_t
base -A selinux_new_output -p tcp --dport 30003 -j SECMARK --selctx system_u:object_r:tcs_client_packet_t
base -A selinux_new_output -p tcp --dport 23 -j SECMARK --selctx system_u:object_r:telnetd_client_packet_t
base -A selinux_new_output -p udp --dport 69 -j SECMARK --selctx system_u:object_r:tftp_client_packet_t
base -A selinux_new_output -p tcp --dport 6969 -j SECMARK --selctx system_u:object_r:tor_client_packet_t
base -A selinux_new_output -p tcp --dport 9001 -j SECMARK --selctx system_u:object_r:tor_client_packet_t
base -A selinux_new_output -p tcp --dport 9030 -j SECMARK --selctx system_u:object_r:tor_client_packet_t
base -A selinux_new_output -p tcp --dport 9050 -j SECMARK --selctx system_u:object_r:tor_client_packet_t
base -A selinux_new_output -p tcp --dport 9051 -j SECMARK --selctx system_u:object_r:tor_client_packet_t
base -A selinux_new_output -p udp --dport 64000:64010 -j SECMARK --selctx system_u:object_r:traceroute_client_packet_t
base -A selinux_new_output -p tcp --dport 8081 -j SECMARK --selctx system_u:object_r:transproxy_client_packet_t
base -A selinux_new_output -p tcp --dport 10200 -j SECMARK --selctx system_u:object_r:trisoap_client_packet_t
base -A selinux_new_output -p udp --dport 10200 -j SECMARK --selctx system_u:object_r:trisoap_client_packet_t
base -A selinux_new_output -p tcp --dport 8200 -j SECMARK --selctx system_u:object_r:trivnet1_client_packet_t
base -A selinux_new_output -p udp --dport 8200 -j SECMARK --selctx system_u:object_r:trivnet1_client_packet_t
base -A selinux_new_output -p tcp --dport 3493 -j SECMARK --selctx system_u:object_r:ups_client_packet_t
base -A selinux_new_output -p tcp --dport 540 -j SECMARK --selctx system_u:object_r:uucpd_client_packet_t
base -A selinux_new_output -p tcp --dport 6081:6082 -j SECMARK --selctx system_u:object_r:varnishd_client_packet_t
base -A selinux_new_output -p tcp --dport 16509 -j SECMARK --selctx system_u:object_r:virt_client_packet_t
base -A selinux_new_output -p udp --dport 16509 -j SECMARK --selctx system_u:object_r:virt_client_packet_t
base -A selinux_new_output -p tcp --dport 16514 -j SECMARK --selctx system_u:object_r:virt_client_packet_t
base -A selinux_new_output -p udp --dport 16514 -j SECMARK --selctx system_u:object_r:virt_client_packet_t
base -A selinux_new_output -p tcp --dport 1533 -j SECMARK --selctx system_u:object_r:virtual_places_client_packet_t
base -A selinux_new_output -p udp --dport 1533 -j SECMARK --selctx system_u:object_r:virtual_places_client_packet_t
base -A selinux_new_output -p tcp --dport 49152:49216 -j SECMARK --selctx system_u:object_r:virt_migration_client_packet_t
base -A selinux_new_output -p tcp --dport 5900 -j SECMARK --selctx system_u:object_r:vnc_client_packet_t
base -A selinux_new_output -p udp --dport 2048 -j SECMARK --selctx system_u:object_r:wccp_client_packet_t
base -A selinux_new_output -p tcp --dport 9090 -j SECMARK --selctx system_u:object_r:websm_client_packet_t
base -A selinux_new_output -p udp --dport 9090 -j SECMARK --selctx system_u:object_r:websm_client_packet_t
base -A selinux_new_output -p tcp --dport 43 -j SECMARK --selctx system_u:object_r:whois_client_packet_t
base -A selinux_new_output -p udp --dport 43 -j SECMARK --selctx system_u:object_r:whois_client_packet_t
base -A selinux_new_output -p tcp --dport 4321 -j SECMARK --selctx system_u:object_r:whois_client_packet_t
base -A selinux_new_output -p udp --dport 4321 -j SECMARK --selctx system_u:object_r:whois_client_packet_t
base -A selinux_new_output -p tcp --dport 3261 -j SECMARK --selctx system_u:object_r:winshadow_client_packet_t
base -A selinux_new_output -p udp --dport 3261 -j SECMARK --selctx system_u:object_r:winshadow_client_packet_t
base -A selinux_new_output -p tcp --dport 5357 -j SECMARK --selctx system_u:object_r:wsdapi_client_packet_t
base -A selinux_new_output -p udp --dport 5357 -j SECMARK --selctx system_u:object_r:wsdapi_client_packet_t
base -A selinux_new_output -p tcp --dport 3378 -j SECMARK --selctx system_u:object_r:wsicopy_client_packet_t
base -A selinux_new_output -p udp --dport 3378 -j SECMARK --selctx system_u:object_r:wsicopy_client_packet_t
base -A selinux_new_output -p udp --dport 177 -j SECMARK --selctx system_u:object_r:xdmcp_client_packet_t
base -A selinux_new_output -p tcp --dport 177 -j SECMARK --selctx system_u:object_r:xdmcp_client_packet_t
base -A selinux_new_output -p tcp --dport 8002 -j SECMARK --selctx system_u:object_r:xen_client_packet_t
base -A selinux_new_output -p tcp --dport 7100 -j SECMARK --selctx system_u:object_r:xfs_client_packet_t
base -A selinux_new_output -p tcp --dport 6000:6020 -j SECMARK --selctx system_u:object_r:xserver_client_packet_t
base -A selinux_new_output -p tcp --dport 236 -j SECMARK --selctx system_u:object_r:zarafa_client_packet_t
base -A selinux_new_output -p tcp --dport 237 -j SECMARK --selctx system_u:object_r:zarafa_client_packet_t
base -A selinux_new_output -p tcp --dport 10051 -j SECMARK --selctx system_u:object_r:zabbix_client_packet_t
base -A selinux_new_output -p tcp --dport 10050 -j SECMARK --selctx system_u:object_r:zabbix_agent_client_packet_t
base -A selinux_new_output -p tcp --dport 2181 -j SECMARK --selctx system_u:object_r:zookeeper_client_client_packet_t
base -A selinux_new_output -p tcp --dport 3888 -j SECMARK --selctx system_u:object_r:zookeeper_election_client_packet_t
base -A selinux_new_output -p tcp --dport 2888 -j SECMARK --selctx system_u:object_r:zookeeper_leader_client_packet_t
base -A selinux_new_output -p tcp --dport 2600:2604 -j SECMARK --selctx system_u:object_r:zebra_client_packet_t
base -A selinux_new_output -p tcp --dport 2606 -j SECMARK --selctx system_u:object_r:zebra_client_packet_t
base -A selinux_new_output -p udp --dport 2600:2604 -j SECMARK --selctx system_u:object_r:zebra_client_packet_t
base -A selinux_new_output -p udp --dport 2606 -j SECMARK --selctx system_u:object_r:zebra_client_packet_t
base -A selinux_new_output -p tcp --dport 1229 -j SECMARK --selctx system_u:object_r:zented_client_packet_t
base -A selinux_new_output -p udp --dport 1229 -j SECMARK --selctx system_u:object_r:zented_client_packet_t
base -A selinux_new_output -p tcp --dport 8021 -j SECMARK --selctx system_u:object_r:zope_client_packet_t
post -A selinux_new_output -j CONNSECMARK --save
post -A selinux_new_output -j RETURN
post COMMIT
