-m owner --gid-owner deluge -o lo -j ACCEPT -m owner --uid-owner deluge -p tcp --dport 53 -j ACCEPT -m owner --uid-owner deluge -p udp --dport 53 -j ACCEPT -m owner --gid-owner deluge '!' -o tun0 -j REJECT