iptables -vL Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 2 80 DROP all -- any any anywhere anywhere state INVALID 1425 88979 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 2 80 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 79 6519 input_rule all -- any any anywhere anywhere 59 5129 input_wan all -- ppp0 any anywhere anywhere 79 6519 LAN_ACCEPT all -- any any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 46 2752 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 13 2377 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 93 5460 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 5877 3252K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 48 2880 forwarding_rule all -- any any anywhere anywhere 3 180 forwarding_wan all -- ppp0 any anywhere anywhere 0 0 ACCEPT all -- br-lan br-lan anywhere anywhere 45 2700 ACCEPT all -- br-lan ppp0 anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 1115 126K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 12 902 output_rule all -- any any anywhere anywhere 12 902 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 59 5129 RETURN all -- ppp0 any anywhere anywhere 0 0 RETURN all -- eth0.1 any anywhere anywhere 20 1390 ACCEPT all -- any any anywhere anywhere Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination 3 180 ACCEPT tcp -- any any anywhere gray tcp dpt:80 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination Chain output_rule (1 references) pkts bytes target prot opt in out source destination