router ~ # iptables -vnL
Chain INPUT (policy ACCEPT 633 packets, 67002 bytes)
 pkts bytes target     prot opt in     out     source               destination
 2059  174K ACCEPT     all  --  eth0   *       0.0.0.0/0            0.0.0.0/0
  496 47864 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  eth0   *       0.0.0.0/0            192.168.0.0/24
 6029  287K ACCEPT     all  --  eth0   *       192.168.0.0/24       0.0.0.0/0
 1141  454K ACCEPT     all  --  eth1   *       0.0.0.0/0            192.168.0.0/24
    0     0 ACCEPT     all  --  eth2   *       0.0.0.0/0            192.168.0.0/24
    0     0 DROP       tcp  --  *      *       192.168.0.0/24       0.0.0.0/0           #conn/32 > 500
    0     0 REJECT     tcp  --  eth0   *       192.168.0.0/24       0.0.0.0/0           #conn/32 > 500 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT 3089 packets, 2023K bytes)
 pkts bytes target     prot opt in     out     source               destination
router ~ #