root@OpenWrt:~# iptables -nvL -t nat Chain PREROUTING (policy ACCEPT 2252 packets, 690K bytes) pkts bytes target prot opt in out source destination 35 1772 zone_wan_prerouting all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 2236 694K zone_lan_prerouting all -- br-lan * 0.0.0.0/0 0.0.0.0/0 2271 696K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 11 packets, 1926 bytes) pkts bytes target prot opt in out source destination 183 11194 zone_wan_nat all -- * 3g-wan 0.0.0.0/0 0.0.0.0/0 12 2254 zone_lan_nat all -- * br-lan 0.0.0.0/0 0.0.0.0/0 14 2364 postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 160 packets, 11760 bytes) pkts bytes target prot opt in out source destination Chain nat_reflection_in (1 references) pkts bytes target prot opt in out source destination Chain nat_reflection_out (1 references) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination 11 1926 nat_reflection_out all -- * * 0.0.0.0/0 0.0.0.0/0 Chain prerouting_lan (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 2252 690K nat_reflection_in all -- * * 0.0.0.0/0 0.0.0.0/0 Chain prerouting_wan (1 references) pkts bytes target prot opt in out source destination Chain zone_lan_nat (1 references) pkts bytes target prot opt in out source destination Chain zone_lan_prerouting (1 references) pkts bytes target prot opt in out source destination 2236 694K prerouting_lan all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_nat (1 references) pkts bytes target prot opt in out source destination 183 11194 MASQUERADE all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_prerouting (1 references) pkts bytes target prot opt in out source destination 35 1772 prerouting_wan all -- * * 0.0.0.0/0 0.0.0.0/0 root@OpenWrt:~# iptables -nvL Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 357 32115 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 110 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 35 1772 syn_flood tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 663 53404 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 663 53404 input all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 zone_wan_MSSFIX all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 forward all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 reject all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 328 56161 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 110 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 743 51440 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 743 51440 output all -- * * 0.0.0.0/0 0.0.0.0/0 Chain forward (1 references) pkts bytes target prot opt in out source destination 0 0 zone_lan_forward all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 zone_wan_forward all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 Chain forwarding_lan (1 references) pkts bytes target prot opt in out source destination Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 0 0 nat_reflection_fwd all -- * * 0.0.0.0/0 0.0.0.0/0 Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination Chain input (1 references) pkts bytes target prot opt in out source destination 627 51588 zone_lan all -- br-lan * 0.0.0.0/0 0.0.0.0/0 36 1816 zone_wan all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 Chain input_lan (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination 1 52 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 Chain nat_reflection_fwd (1 references) pkts bytes target prot opt in out source destination Chain output (1 references) pkts bytes target prot opt in out source destination 743 51440 zone_lan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 714 47270 zone_wan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain output_rule (1 references) pkts bytes target prot opt in out source destination Chain reject (5 references) pkts bytes target prot opt in out source destination 35 1764 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain syn_flood (1 references) pkts bytes target prot opt in out source destination 35 1772 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 25/sec burst 50 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_lan (1 references) pkts bytes target prot opt in out source destination 627 51588 input_lan all -- * * 0.0.0.0/0 0.0.0.0/0 627 51588 zone_lan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_ACCEPT (2 references) pkts bytes target prot opt in out source destination 627 51588 ACCEPT all -- br-lan * 0.0.0.0/0 0.0.0.0/0 29 4170 ACCEPT all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_DROP (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 DROP all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_MSSFIX (0 references) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * br-lan 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU Chain zone_lan_REJECT (1 references) pkts bytes target prot opt in out source destination 0 0 reject all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 reject all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_forward (1 references) pkts bytes target prot opt in out source destination 0 0 zone_wan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 forwarding_lan all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 zone_lan_REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:68 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 36 1816 input_wan all -- * * 0.0.0.0/0 0.0.0.0/0 35 1764 zone_wan_REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_ACCEPT (2 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 714 47270 ACCEPT all -- * 3g-wan 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_DROP (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 0 0 DROP all -- * 3g-wan 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_MSSFIX (1 references) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * 3g-wan 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU Chain zone_wan_REJECT (2 references) pkts bytes target prot opt in out source destination 35 1764 reject all -- 3g-wan * 0.0.0.0/0 0.0.0.0/0 0 0 reject all -- * 3g-wan 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_forward (1 references) pkts bytes target prot opt in out source destination 0 0 forwarding_wan all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 zone_wan_REJECT all -- * * 0.0.0.0/0 0.0.0.0/0