root@OpenWrt:~# ipkg list_installed | grep "iptab" iptables - 1.3.1-1 - iptables-extra - 1.3.1-1 - kmod-iptables-extra - 2.4.30-1 - ############################# ### iptables -vLnt mangle ### ############################# Chain PREROUTING (policy ACCEPT 89278 packets, 12M bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 MARK all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain INPUT (policy ACCEPT 15223 packets, 1419K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain FORWARD (policy ACCEPT 72586 packets, 11M bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain OUTPUT (policy ACCEPT 16682 packets, 1726K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain POSTROUTING (policy ACCEPT 89267 packets, 13M bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit ############################# ### iptables -vLnt nat ### ############################# Chain PREROUTING (policy ACCEPT 25355 packets, 2074K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent 28 1511 prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain POSTROUTING (policy ACCEPT 3 packets, 325 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent 21 848 postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 21 848 MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain OUTPUT (policy ACCEPT 46 packets, 3290 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:1721 to:192.168.0.33 0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:7331 to:192.168.0.33 0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 to:192.168.0.34 ############################# ### iptables -vLnt filter ### ############################# Chain INPUT (policy DROP 1 packets, 78 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 494 45350 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02 27 1463 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 5 240 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 20 968 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 2 255 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 2 96 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 38 3147 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 1 48 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 1 48 ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 1 packets, 40 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 563 70260 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:1721 0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:7331 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination