rendered paste bodyroot@wifi:/etc/init.d# iptables -nvL
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
821 86737 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02
30 5347 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0
10 640 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
1 486 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
28 1576 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
934 214K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
22 1305 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
732 206K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
8 518 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0
8 518 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain forward_vlan1 (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- eth1 * 0.0.0.0/0 0.0.0.0/0
22 1305 ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0 state NEW
0 0 ACCEPT all -- tun+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tap+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- vlan1 * 0.0.0.0/0 192.168.50.2 tcp dpt:3232
0 0 forward_vlan1 all -- vlan1 * 0.0.0.0/0 0.0.0.0/0
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
2 656 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67
2 656 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68
0 0 ACCEPT all -- eth1 * 0.0.0.0/0 0.0.0.0/0
15 2909 ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tap+ * 0.0.0.0/0 0.0.0.0/0
11 1126 input_vlan1 all -- vlan1 * 0.0.0.0/0 0.0.0.0/0
Chain input_vlan1 (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- eth1 * 0.0.0.0/0 0.0.0.0/0
root@wifi:/etc/init.d# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 152K packets, 29M bytes)
pkts bytes target prot opt in out source destination
97 15710 prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 1417 packets, 134K bytes)
pkts bytes target prot opt in out source destination
47 2859 postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
45 2665 MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 16186 packets, 1117K bytes)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
2 194 SNAT all -- * br0 192.168.50.0/24 192.168.50.77 to:192.168.50.1
0 0 SNAT all -- * br0 192.168.5.0/24 192.168.50.77 to:192.168.50.1
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT tcp -- * * 192.168.5.0/24 0.0.0.0/0 tcp dpt:80 to:192.168.50.77:3128
0 0 DROP tcp -- * * 192.168.5.0/24 0.0.0.0/0 tcp dpt:443
0 0 DROP tcp -- * * 192.168.5.0/24 0.0.0.0/0 tcp dpt:22
0 0 DROP tcp -- * * 192.168.5.0/24 0.0.0.0/0 tcp dpt:25
0 0 DNAT udp -- br0 * 0.0.0.0 255.255.255.255 udp spt:68 dpt:67 to:192.168.50.77:67
0 0 DNAT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:3232 to:192.168.50.2:3232
35 8998 prerouting_vlan1 all -- vlan1 * 0.0.0.0/0 0.0.0.0/0
Chain prerouting_vlan1 (1 references)
pkts bytes target prot opt in out source destination