root@routerkrieg:~# iptables -xvnL Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 10385 1193014 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02 2763 170158 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 2622 159115 input_wan all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 2763 170158 LAN_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 4 275 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0 1866 94425 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 752 64415 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 54 2520 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU 7722 2019637 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 37 5391 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 forwarding_wan all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0 37 5391 ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0 Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 2622 159115 RETURN all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 141 11043 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 12439 2104552 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 25 1829 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 25 1829 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination root@routerkrieg:~#