root@OpenWrt:/etc/config# iptables -v -t filter -L Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 7 272 DROP all -- any any anywhere anywhere state INVALID 458 31946 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 285 50715 input_rule all -- any any anywhere anywhere 34 3988 ACCEPT all -- !vlan1 any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 11 635 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 240 46092 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 28 1716 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 466 40908 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 394 50613 forwarding_rule all -- any any anywhere anywhere 0 0 ACCEPT all -- br0 br0 anywhere anywhere 394 50613 ACCEPT all -- vlan0 vlan1 anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 515 36375 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 2 116 output_rule all -- any any anywhere anywhere 2 116 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- vlan1 any anywhere anywhere tcp dpt:22 0 0 ACCEPT tcp -- vlan1 any anywhere anywhere tcp dpt:23 Chain output_rule (1 references) pkts bytes target prot opt in out source destination root@OpenWrt:/etc/config# iptables -v -t mangle -L Chain PREROUTING (policy ACCEPT 3197 packets, 423K bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 1140 packets, 122K bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 1579 packets, 191K bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 780 packets, 54431 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 2359 packets, 246K bytes) pkts bytes target prot opt in out source destination root@OpenWrt:/etc/config# iptables -v -t nat -L Chain PREROUTING (policy ACCEPT 1274 packets, 229K bytes) pkts bytes target prot opt in out source destination 842 148K prerouting_rule all -- any any anywhere anywhere Chain POSTROUTING (policy ACCEPT 7 packets, 402 bytes) pkts bytes target prot opt in out source destination 278 35763 postrouting_rule all -- any any anywhere anywhere 277 35699 MASQUERADE all -- any vlan1 anywhere anywhere Chain OUTPUT (policy ACCEPT 10 packets, 558 bytes) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- vlan1 any anywhere anywhere tcp dpt:22 0 0 ACCEPT tcp -- vlan1 any anywhere anywhere tcp dpt:23 root@OpenWrt:/etc/config#