root@gw - # iptables -L -n Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67 reject-with icmp-port-unreachable REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 reject-with icmp-port-unreachable ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 DROP tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:0:1023 DROP udp -- 0.0.0.0/0 0.0.0.0/0 udp dpts:0:1023 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 Chain FORWARD (policy DROP) target prot opt source destination DROP all -- 0.0.0.0/0 192.168.0.0/16 ACCEPT all -- 192.168.0.0/16 0.0.0.0/0 ACCEPT all -- 0.0.0.0/0 192.168.0.0/16 Chain OUTPUT (policy ACCEPT) target prot opt source destination root@gw ~ #