root@routerkrieg:~# iptables -xvnL Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 275 17513 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 940 110481 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02 1332 119479 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 1332 119479 LAN_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2445550 1055280834 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 4 66340 3549252 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 23563 1213156 ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 1332 119479 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 1737 140785 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 10402 3694950 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 10402 3694950 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forward_vlan1 (0 references) pkts bytes target prot opt in out source destination Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination 37 1996 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:1976 29559 1512572 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:9080:9089 13169 820906 ACCEPT all -- vlan1 * 0.0.0.0/0 10.66.6.69 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_vlan1 (0 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination