# iptables -t nat -n -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
# iptables -L -v
Chain INPUT (policy ACCEPT 1904 packets, 152K bytes)
 pkts bytes target     prot opt in     out     source               destination
   81  5178 CFG        tcp  --  any    any     10.1.1.2             anywhere           tcp dpt:www Records Packet's Source Interface

    0     0 ACCEPT     all  --  !br0   any     anywhere             anywhere           state RELATED,ESTABLISHED
 7056  423K synflood   tcp  --  any    any     anywhere             anywhere           state NEW
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN/FIN,SYN
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:SYN,RST/SYN,RST
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
    0     0 ACCEPT     icmp --  !br0   any     anywhere             anywhere           icmp echo-request state NEW
    0     0 ACCEPT     igmp --  any    any     anywhere             anywhere
    0     0 ACCEPT     udp  --  any    any     anywhere             anywhere           udp dpt:161
    0     0 ACCEPT     all  --  lo     any     anywhere             anywhere
    0     0 DROP       all  --  !br0   any     anywhere             anywhere

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 TCPMSS     tcp  --  any    any     anywhere             anywhere           tcp flags:SYN,RST/SYN TCPMSS set 1360
    0     0 ACCEPT     all  --  !br0   any     anywhere             anywhere           state RELATED,ESTABLISHED
    0     0 synflood   tcp  --  any    any     anywhere             anywhere           state NEW
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN/FIN,SYN
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:SYN,RST/SYN,RST
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp dpt:telnet
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp dpt:ftp
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp dpt:ftp-data
    0     0 DROP       udp  --  !br0   any     anywhere             anywhere           udp dpt:500
    0     0 DROP       tcp  --  !br0   any     anywhere             anywhere           tcp dpt:domain
    0     0 DROP       udp  --  !br0   any     anywhere             anywhere           udp dpt:domain
    0     0 DROP       udp  --  !br0   any     anywhere             anywhere           udp dpt:route
    0     0 ACCEPT     icmp --  !br0   any     anywhere             anywhere           icmp echo-request state NEW
    0     0 ACCEPT     igmp --  any    any     anywhere             anywhere
    0     0 DROP       all  --  !br0   any     anywhere             anywhere

Chain OUTPUT (policy ACCEPT 8423 packets, 738K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       icmp --  any    !br0    anywhere             anywhere           icmp destination-unreachable
    0     0 DROP       icmp --  any    !br0    anywhere             anywhere           state INVALID

Chain synflood (2 references)
 pkts bytes target     prot opt in     out     source               destination
  143  8268 RETURN     tcp  --  any    any     anywhere             anywhere           limit: avg 15/sec burst 25
 6913  415K REJECT     tcp  --  any    any     anywhere             anywhere           reject-with tcp-reset
#