root@OpenWrt:~# ipkg list_installed | grep "iptab" iptables - 1.3.1-1 - iptables-extra - 1.3.1-1 - kmod-iptables-extra - 2.4.30-1 - ############################# ### iptables -vLnt mangle ### ############################# Chain PREROUTING (policy ACCEPT 106K packets, 21M bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 6953 7955K MARK all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0x57 666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain INPUT (policy ACCEPT 16101 packets, 1497K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain FORWARD (policy ACCEPT 88416 packets, 20M bytes) pkts bytes target prot opt in out source destination 6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain OUTPUT (policy ACCEPT 17579 packets, 1836K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain POSTROUTING (policy ACCEPT 106K packets, 22M bytes) pkts bytes target prot opt in out source destination 6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit ############################# ### iptables -vLnt nat ### ############################# Chain PREROUTING (policy ACCEPT 27243 packets, 2244K bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent 1916 172K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 1 44 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain POSTROUTING (policy ACCEPT 3 packets, 325 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent 1715 148K postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0 1715 148K MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit Chain OUTPUT (policy ACCEPT 48 packets, 3418 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:1721 to:192.168.0.33 0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:7331 to:192.168.0.33 0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 to:192.168.0.34 ############################# ### iptables -vLnt filter ### ############################# Chain INPUT (policy DROP 1 packets, 78 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 13 868 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 878 86431 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02 513 37538 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 119 9120 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 313 14976 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 81 13442 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 1203 57688 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 14031 8616K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 1841 161K forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 1841 161K ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 1 packets, 40 bytes) pkts bytes target prot opt in out source destination 0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 1468 190K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 128 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 2 128 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:1721 0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:7331 0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination