root@Scranton:~$ iptables -L -v Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 47 5617 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 59 8556 input_rule all -- any any anywhere anywhere 14 3448 input_wan all -- vlan1 any anywhere anywhere 58 8508 LAN_ACCEPT all -- any any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 3 120 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 10 3280 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 14 656 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 314 124K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 20 1470 forwarding_rule all -- any any anywhere anywhere 4 720 forwarding_wan all -- vlan1 any anywhere anywhere 0 0 ACCEPT all -- br0 br0 anywhere anywhere 16 750 ACCEPT all -- br0 vlan1 anywhere anywhere Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 13 3400 RETURN all -- vlan1 any anywhere anywhere 45 5108 ACCEPT all -- any any anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 60 5793 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 7 964 output_rule all -- any any anywhere anywhere 7 964 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination 3 144 ACCEPT tcp -- any any anywhere robinsonfamilyonline.net tcp dpt:80 0 0 ACCEPT tcp -- any any anywhere robinsonfamilyonline.net tcp dpt:21 1 576 ACCEPT tcp -- any any anywhere robinsonfamilyonline.net tcp dpt:6201 Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination 1 48 ACCEPT tcp -- any any anywhere anywhere tcp dpt:22 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8443 Chain output_rule (1 references) pkts bytes target prot opt in out source destination root@Scranton:~$ root@Scranton:~$ iptables -t nat -L -v Chain NEW (1 references) pkts bytes target prot opt in out source destination 56 5276 RETURN all -- any any anywhere anywhere limit: avg 50/sec burst 100 0 0 DROP all -- any any anywhere anywhere Chain PREROUTING (policy ACCEPT 82 packets, 13177 bytes) pkts bytes target prot opt in out source destination 56 5276 NEW tcp -- any any anywhere anywhere state NEW 112 17287 prerouting_rule all -- any any anywhere anywhere 50 10070 prerouting_wan all -- vlan1 any anywhere anywhere Chain POSTROUTING (policy ACCEPT 15 packets, 2545 bytes) pkts bytes target prot opt in out source destination 35 2549 postrouting_rule all -- any any anywhere anywhere 21 1033 MASQUERADE all -- any vlan1 anywhere anywhere Chain OUTPUT (policy ACCEPT 6 packets, 1600 bytes) pkts bytes target prot opt in out source destination Chain postrouting_rule (1 references) pkts bytes target prot opt in out source destination 0 0 SNAT all -- any br0 robinsonfamilyonline.net robinsonfamilyonline.net to:192.168.1.1 Chain prerouting_rule (1 references) pkts bytes target prot opt in out source destination Chain prerouting_wan (1 references) pkts bytes target prot opt in out source destination 1 48 ACCEPT tcp -- any any anywhere anywhere tcp dpt:22 0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:8443 14 708 DNAT tcp -- any any anywhere anywhere tcp dpt:80 to:192.168.1.201:80 0 0 DNAT tcp -- any any anywhere anywhere tcp dpt:21 to:192.168.1.201:21 15 3354 DNAT tcp -- any any anywhere anywhere tcp dpt:6201 to:192.168.1.201:6201 root@Scranton:~$