root@OpenWrt:~# iptables -L -v; iptables -L -v -t nat Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 999 162K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 545 30026 input_rule all -- any any anywhere anywhere 545 30026 ACCEPT all -- !vlan1 any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 74 packets, 3984 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 57 2964 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 6 240 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 74 3984 forwarding_rule all -- any any anywhere anywhere 0 0 ACCEPT all -- br0 br0 anywhere anywhere 0 0 ACCEPT all -- br0 vlan1 anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 1703 588K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 14 1000 output_rule all -- any any anywhere anywhere 14 1000 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain forward_vlan1 (1 references) pkts bytes target prot opt in out source destination Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 0 0 forward_vlan1 all -- vlan1 any anywhere anywhere Chain input_rule (1 references) pkts bytes target prot opt in out source destination 0 0 input_vlan1 all -- vlan1 any anywhere anywhere Chain input_vlan1 (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination Chain PREROUTING (policy ACCEPT 667 packets, 40277 bytes) pkts bytes target prot opt in out source destination 667 40277 prerouting_rule all -- any any anywhere anywhere Chain POSTROUTING (policy ACCEPT 12 packets, 2798 bytes) pkts bytes target prot opt in out source destination 10 740 postrouting_rule all -- any any anywhere anywhere 0 0 MASQUERADE all -- any vlan1 anywhere anywhere Chain OUTPUT (policy ACCEPT 12 packets, 2798 bytes) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 prerouting_vlan1 all -- vlan1 any anywhere anywhere Chain prerouting_vlan1 (1 references) pkts bytes target prot opt in out source destination root@OpenWrt:~#