-m state --state ESTABLISHED
## BCP38 filtering. Note that addresses here are seen before NAT is applied.
-bcp38 4 ppp0 81.2.113.195 81.187.238.128/28 172.29.198.0/23
+bcp38 4 ppp0 81.2.113.195 81.187.238.128/28 217.169.12.64/28 172.29.198.0/23
bcp38 6 ppp0 2001:8b0:c92::/48
## NAT for RFC1918 addresses.