root@OpenWrt:~# iptables -L FORWARD -v Chain FORWARD (policy DROP 3 packets, 156 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 2 92 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 140 132K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 1 48 forwarding_rule all -- any any anywhere anywhere 0 0 forwarding_wan all -- ppp0 any anywhere anywhere 0 0 ACCEPT all -- br-lan br-lan anywhere anywhere 1 48 ACCEPT all -- br-lan ppp0 anywhere anywhere 0 0 ACCEPT all -- tun0 any anywhere anywhere