Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 5 376 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 112 33947 input_rule all -- any any anywhere anywhere 82 27277 input_wan all -- vlan1 any anywhere anywhere 112 33947 LAN_ACCEPT all -- any any anywhere anywhere 4 240 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 1 60 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 77 26977 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 30 1480 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 3164 2861K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 19 924 forwarding_rule all -- any any anywhere anywhere 18 876 forwarding_wan all -- vlan1 any anywhere anywhere 0 0 ACCEPT all -- br0 br0 anywhere anywhere 1 48 ACCEPT all -- br0 vlan1 anywhere anywhere Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 82 27277 RETURN all -- vlan1 any anywhere anywhere 30 6670 ACCEPT all -- any any anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 48 9877 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 output_rule all -- any any anywhere anywhere 0 0 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination 12 588 ACCEPT tcp -- any any anywhere 192.168.1.201 tcp dpt:80 0 0 ACCEPT udp -- any any anywhere 192.168.1.201 udp dpt:80 6 288 ACCEPT tcp -- any any anywhere 192.168.1.250 tcp dpt:6250 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:22 Chain output_rule (1 references) pkts bytes target prot opt in out source destination