Chain INPUT (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED DROP tcp -- anywhere anywhere tcp option=!2 flags:SYN/SYN input_rule all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT gre -- anywhere anywhere REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED forwarding_rule all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination DROP all -- anywhere anywhere state INVALID ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED output_rule all -- anywhere anywhere ACCEPT all -- anywhere anywhere REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain forward_vlan1 (1 references) target prot opt source destination Chain forwarding_rule (1 references) target prot opt source destination ACCEPT tcp -- anywhere 192.168.1.3 tcp dpt:411 ACCEPT udp -- anywhere 192.168.1.3 udp dpt:412 ACCEPT tcp -- anywhere 192.168.1.6 tcp dpt:413 ACCEPT udp -- anywhere 192.168.1.6 udp dpt:414 ACCEPT tcp -- anywhere 192.168.1.4 tcp dpts:59140:59150 ACCEPT tcp -- anywhere 192.168.1.3 tcp dpts:60050:60060 ACCEPT tcp -- anywhere 192.168.1.6 tcp dpts:60070:60080 ACCEPT tcp -- anywhere 192.168.1.5 tcp dpt:9863 ACCEPT tcp -- anywhere 192.168.1.5 tcp dpt:80 ACCEPT udp -- anywhere 192.168.1.5 udp dpt:80 ACCEPT tcp -- anywhere 192.168.1.5 tcp dpt:25 ACCEPT tcp -- anywhere 192.168.1.5 tcp dpt:22 forward_vlan1 all -- anywhere anywhere Chain input_rule (1 references) target prot opt source destination input_vlan1 all -- anywhere anywhere Chain input_vlan1 (1 references) target prot opt source destination Chain output_rule (1 references) target prot opt source destination