Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

   36  2104 ACCEPT     all  --  lo     any     anywhere             anywhere

 529K  794M ACCEPT     all  --  any    any     anywhere             anywhere
        state RELATED,ESTABLISHED
    5   140 input_ext  all  --  eth0   any     anywhere             anywhere

    0     0 input_ext  all  --  any    any     anywhere             anywhere

    0     0 LOG        all  --  any    any     anywhere             anywhere
        limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix
 `SFW2-IN-ILL-TARGET '
    0     0 DROP       all  --  any    any     anywhere             anywhere


Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

    0     0 LOG        all  --  any    any     anywhere             anywhere
        limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix
 `SFW2-FWD-ILL-ROUTING '

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination

   36  2104 ACCEPT     all  --  any    lo      anywhere             anywhere

 264K   15M ACCEPT     all  --  any    any     anywhere             anywhere
        state NEW,RELATED,ESTABLISHED
    0     0 LOG        all  --  any    any     anywhere             anywhere
        limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix
 `SFW2-OUT-ERROR '

Chain forward_ext (0 references)
 pkts bytes target     prot opt in     out     source               destination


Chain input_ext (2 references)
 pkts bytes target     prot opt in     out     source               destination

    0     0 DROP       all  --  any    any     anywhere             anywhere
        PKTTYPE = broadcast
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere
        icmp source-quench
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere
        icmp echo-request
    0     0 reject_func  tcp  --  any    any     anywhere             anywhere
          tcp dpt:113 state NEW
    5   140 LOG        all  --  any    any     anywhere             anywhere
        limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-optio
ns ip-options prefix `SFW2-INext-DROP-DEFLT '
    5   140 DROP       all  --  any    any     anywhere             anywhere
        PKTTYPE = multicast
    0     0 LOG        tcp  --  any    any     anywhere             anywhere
        limit: avg 3/min burst 5 tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning         tcp-options ip-options prefix `SFW2-INext-DROP-DEFLT '
    0     0 LOG        icmp --  any    any     anywhere             anywhere                    limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix         `SFW2-INext-DROP-DEFLT '
    0     0 LOG        udp  --  any    any     anywhere             anywhere                    limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix         `SFW2-INext-DROP-DEFLT '
    0     0 LOG        all  --  any    any     anywhere             anywhere                    limit: avg 3/min burst 5 state INVALID LOG level warning tcp-options ip-        options prefix `SFW2-INext-DROP-DEFLT-INV '
    0     0 DROP       all  --  any    any     anywhere             anywhere            

Chain reject_func (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere                    reject-with tcp-reset
    0     0 REJECT     udp  --  any    any     anywhere             anywhere                    reject-with icmp-port-unreachable
    0     0 REJECT     all  --  any    any     anywhere             anywhere                    reject-with icmp-proto-unreachable