All pastes #2065993 Raw Edit

Anonymous

public text v1 · immutable
#2065993 ·published 2011-05-20 21:16 UTC
rendered paste body
root@OpenWrt:~# iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 2252 packets, 690K bytes)
 pkts bytes target     prot opt in     out     source               destination
   35  1772 zone_wan_prerouting  all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0
 2236  694K zone_lan_prerouting  all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
 2271  696K prerouting_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain POSTROUTING (policy ACCEPT 11 packets, 1926 bytes)
 pkts bytes target     prot opt in     out     source               destination
  183 11194 zone_wan_nat  all  --  *      3g-wan  0.0.0.0/0            0.0.0.0/0
   12  2254 zone_lan_nat  all  --  *      br-lan  0.0.0.0/0            0.0.0.0/0
   14  2364 postrouting_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 160 packets, 11760 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain nat_reflection_in (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain nat_reflection_out (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain postrouting_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
   11  1926 nat_reflection_out  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain prerouting_lan (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain prerouting_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
 2252  690K nat_reflection_in  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain prerouting_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain zone_lan_nat (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain zone_lan_prerouting (1 references)
 pkts bytes target     prot opt in     out     source               destination
 2236  694K prerouting_lan  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_wan_nat (1 references)
 pkts bytes target     prot opt in     out     source               destination
  183 11194 MASQUERADE  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_wan_prerouting (1 references)
 pkts bytes target     prot opt in     out     source               destination
   35  1772 prerouting_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0
























root@OpenWrt:~#  iptables -nvL

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  357 32115 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    2   110 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
   35  1772 syn_flood  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02
  663 53404 input_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  663 53404 input      all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 zone_wan_MSSFIX  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 forwarding_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 forward    all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 reject     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  328 56161 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    2   110 ACCEPT     all  --  *      lo      0.0.0.0/0            0.0.0.0/0
  743 51440 output_rule  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  743 51440 output     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 zone_lan_forward  all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
    0     0 zone_wan_forward  all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0

Chain forwarding_lan (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 nat_reflection_fwd  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain forwarding_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input (1 references)
 pkts bytes target     prot opt in     out     source               destination
  627 51588 zone_lan   all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
   36  1816 zone_wan   all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0

Chain input_lan (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain input_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination
    1    52 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:22

Chain nat_reflection_fwd (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain output (1 references)
 pkts bytes target     prot opt in     out     source               destination
  743 51440 zone_lan_ACCEPT  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  714 47270 zone_wan_ACCEPT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain output_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain reject (5 references)
 pkts bytes target     prot opt in     out     source               destination
   35  1764 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with tcp-reset
    0     0 REJECT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           reject-with icmp-port-unreachable

Chain syn_flood (1 references)
 pkts bytes target     prot opt in     out     source               destination
   35  1772 RETURN     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x17/0x02 limit: avg 25/sec burst 50
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_lan (1 references)
 pkts bytes target     prot opt in     out     source               destination
  627 51588 input_lan  all  --  *      *       0.0.0.0/0            0.0.0.0/0
  627 51588 zone_lan_ACCEPT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_lan_ACCEPT (2 references)
 pkts bytes target     prot opt in     out     source               destination
  627 51588 ACCEPT     all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
   29  4170 ACCEPT     all  --  *      br-lan  0.0.0.0/0            0.0.0.0/0

Chain zone_lan_DROP (0 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
    0     0 DROP       all  --  *      br-lan  0.0.0.0/0            0.0.0.0/0

Chain zone_lan_MSSFIX (0 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 TCPMSS     tcp  --  *      br-lan  0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU

Chain zone_lan_REJECT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 reject     all  --  br-lan *       0.0.0.0/0            0.0.0.0/0
    0     0 reject     all  --  *      br-lan  0.0.0.0/0            0.0.0.0/0

Chain zone_lan_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 zone_wan_ACCEPT  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 forwarding_lan  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 zone_lan_REJECT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:68
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0           icmp type 8
   36  1816 input_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0
   35  1764 zone_wan_REJECT  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain zone_wan_ACCEPT (2 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0
  714 47270 ACCEPT     all  --  *      3g-wan  0.0.0.0/0            0.0.0.0/0

Chain zone_wan_DROP (0 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0
    0     0 DROP       all  --  *      3g-wan  0.0.0.0/0            0.0.0.0/0

Chain zone_wan_MSSFIX (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 TCPMSS     tcp  --  *      3g-wan  0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU

Chain zone_wan_REJECT (2 references)
 pkts bytes target     prot opt in     out     source               destination
   35  1764 reject     all  --  3g-wan *       0.0.0.0/0            0.0.0.0/0
    0     0 reject     all  --  *      3g-wan  0.0.0.0/0            0.0.0.0/0

Chain zone_wan_forward (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 forwarding_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0
    0     0 zone_wan_REJECT  all  --  *      *       0.0.0.0/0            0.0.0.0/0