iptables -L -n -v -t filter --------------------------- root@OpenWrt:~# iptables -L -n -v -t filter Chain INPUT (policy DROP 2 packets, 96 bytes) pkts bytes target prot opt in out source destination 142 8036 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 707 55936 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 27 1224 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02 31311 1559K input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 flags:0x17/0x02 126 20941 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0 1 60 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 29215 1422K REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 1965 117K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 10483 503K TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 277K 47M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 8895 442K forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 8860 440K ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 31134 1426K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 11 714 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 11 714 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 35 1680 ACCEPT tcp -- vlan1 * 0.0.0.0/0 192.168.1.2 tcp dpt:80 Chain input_rule (1 references) pkts bytes target prot opt in out source destination 2 96 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 Chain output_rule (1 references) pkts bytes target prot opt in out source destination iptables -L -n -v -t nat ------------------------ Chain PREROUTING (policy ACCEPT 36151 packets, 1798K bytes) pkts bytes target prot opt in out source destination 36145 1796K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 15 packets, 688 bytes) pkts bytes target prot opt in out source destination 33520 1388K postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 33509 1388K MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 7 packets, 434 bytes) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 2 96 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 9 432 DNAT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:192.168.1.2