Chain INPUT (policy DROP 40 packets, 3960 bytes)
 pkts bytes target     prot opt in     out     source               destination

  834 78682 ACCEPT     all  --  br0    any     anywhere             anywhere

  229  150K ACCEPT     all  --  lo     any     anywhere             anywhere

    0     0 ACCEPT     all  --  ipsec0 any     anywhere             anywhere

  254 66966 ACCEPT     all  --  any    any     anywhere             anywhere
       state RELATED,ESTABLISHED
    0     0 DOS        tcp  --  any    any     anywhere             anywhere
       tcp flags:SYN,RST,ACK/SYN
    0     0 DOS        udp  --  any    any     anywhere             anywhere

    2   122 DOS        icmp --  any    any     anywhere             anywhere
       icmp echo-request
   42  4082 PROXY      all  --  any    any     anywhere             anywhere

   42  4082 LOCAL_SERVICE  all  --  any    any     anywhere             anywhere


Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

33189   21M OUT_FILTER  all  --  any    any     anywhere             anywhere

33189   21M CFILTER    all  --  any    any     anywhere             anywhere

33189   21M FW_BASIC   all  --  any    any     anywhere             anywhere

   14   680 DOS        tcp  --  any    any     anywhere             anywhere
       tcp flags:SYN,RST,ACK/SYN
   20  1008 DOS        udp  --  any    any     anywhere             anywhere

    0     0 DOS        icmp --  any    any     anywhere             anywhere
       icmp echo-request
   34  1688 IN_FILTER  all  --  any    any     anywhere             anywhere

    0     0 FW_UPNP    all  --  any    any     anywhere             anywhere


Chain OUTPUT (policy ACCEPT 21854 packets, 8273K bytes)
 pkts bytes target     prot opt in     out     source               destination


Chain BLOCK (0 references)
 pkts bytes target     prot opt in     out     source               destination

    0     0 LOG        all  --  any    any     anywhere             anywhere
       LOG level warning prefix `[BLOCK] '
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere
       tcp dpt:80 reject-with http-block

Chain CFILTER (1 references)
 pkts bytes target     prot opt in     out     source               destination

 2297 1736K HTTP       tcp  --  br0    any     anywhere             anywhere
       STRING match GET tcp dpt:80 flags:FIN,SYN,RST,PSH,ACK,URG/PSH,ACK
  147  103K HTTP       tcp  --  br0    any     anywhere             anywhere
       STRING match POST tcp dpt:80 flags:FIN,SYN,RST,PSH,ACK,URG/PSH,ACK
   24 17676 HTTP       tcp  --  br0    any     anywhere             anywhere
       STRING match HEAD tcp dpt:80 flags:FIN,SYN,RST,PSH,ACK,URG/PSH,ACK

Chain DOS (6 references)
 pkts bytes target     prot opt in     out     source               destination


Chain FW_BASIC (1 references)
 pkts bytes target     prot opt in     out     source               destination

    0     0 ACCEPT     all  --  lo     any     anywhere             anywhere

    0     0 ACCEPT     all  --  ipsec0 any     anywhere             anywhere

 1665 79564 TCPMSS     tcp  --  any    any     anywhere             anywhere
       tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
32132   21M ACCEPT     all  --  any    any     anywhere             anywhere
       state RELATED,ESTABLISHED
  253 23829 ACCEPT     all  --  any    any     anywhere             anywhere
       MARK match 0x2511
  770 40678 ACCEPT     all  --  br0    any     anywhere             anywhere


Chain FW_UPNP (1 references)
 pkts bytes target     prot opt in     out     source               destination


Chain HTTP (3 references)
 pkts bytes target     prot opt in     out     source               destination


Chain IN_FILTER (1 references)
 pkts bytes target     prot opt in     out     source               destination

    0     0 RETURN     all  --  !ppp0  any     anywhere             anywhere

   34  1688 ACCEPT     all  --  any    any     anywhere             192.168.0.2


Chain LOCAL_SERVICE (1 references)
 pkts bytes target     prot opt in     out     source               destination

    0     0 ACCEPT     all  --  any    any     anywhere             anywhere
       MARK match 0x2511
    0     0 ACCEPT     tcp  --  any    any     anywhere             www.routerlo
gin.comtcp dpt:80 MARK match 0x2643
    2   122 ACCEPT     icmp --  ppp0   any     anywhere             anywhere


Chain OUT_FILTER (1 references)
 pkts bytes target     prot opt in     out     source               destination

18163   18M RETURN     all  --  !br0   any     anywhere             anywhere


Chain PROXY (1 references)
 pkts bytes target     prot opt in     out     source               destination


Chain SCAN (0 references)
 pkts bytes target     prot opt in     out     source               destination

#