root@OpenWrt:/etc/openvpn# iptables -L -v Chain INPUT (policy DROP 1 packets, 48 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 797 86950 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN 106 5268 input_rule all -- any any anywhere anywhere 106 5268 input_wan all -- eth0.1 any anywhere anywhere 48 2484 LAN_ACCEPT all -- any any anywhere anywhere 0 0 ACCEPT icmp -- any any anywhere anywhere 0 0 ACCEPT gre -- any any anywhere anywhere 48 2484 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable 0 0 ACCEPT all -- tap0 any anywhere anywhere Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 0 0 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU 0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 forwarding_rule all -- any any anywhere anywhere 0 0 forwarding_wan all -- eth0.1 any anywhere anywhere 0 0 ACCEPT all -- br-lan br-lan anywhere anywhere 0 0 ACCEPT all -- br-lan eth0.1 anywhere anywhere 0 0 ACCEPT all -- tap0 any anywhere anywhere 0 0 ACCEPT all -- tap0 any anywhere anywhere 0 0 ACCEPT all -- tap0 any anywhere anywhere Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- any any anywhere anywhere state INVALID 808 110K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 0 0 output_rule all -- any any anywhere anywhere 0 0 ACCEPT all -- any any anywhere anywhere 0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset 0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable Chain LAN_ACCEPT (1 references) pkts bytes target prot opt in out source destination 48 2484 RETURN all -- eth0.1 any anywhere anywhere 0 0 ACCEPT all -- any any anywhere anywhere Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination 56 2688 ACCEPT tcp -- any any anywhere anywhere tcp dpt:443 2 96 ACCEPT tcp -- any any anywhere anywhere tcp dpt:22 Chain output_rule (1 references) pkts bytes target prot opt in out source destination