root@OpenWrt:~# iptables -vL --line-numbers
Chain INPUT (policy ACCEPT 171 packets, 82751 bytes)
num pkts bytes target prot opt in out source destination
1 611 41503 ACCEPT all -- tun+ any anywhere anywhere state RELATED,ESTABLISHED
2 70 8664 DROP all -- any any anywhere anywhere state INVALID
3 30892 4739K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
4 43 2325 ACCEPT all -- lo any anywhere anywhere
5 2667 132K syn_flood tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
6 38641 7363K input_rule all -- any any anywhere anywhere
7 38641 7363K input all -- any any anywhere anywhere
Chain FORWARD (policy DROP 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 10432 1701K ACCEPT all -- tun+ any anywhere anywhere state RELATED,ESTABLISHED
2 32057 9277K ACCEPT all -- any tun+ anywhere anywhere
3 6171K 5184M zone_wan_MSSFIX all -- any any anywhere anywhere
4 3 201 DROP all -- any any anywhere anywhere state INVALID
5 6129K 5180M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
6 42677 4031K forwarding_rule all -- any any anywhere anywhere
7 42677 4031K forward all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
num pkts bytes target prot opt in out source destination
1 546 119K ACCEPT all -- any tun+ anywhere anywhere
2 0 0 DROP all -- any any anywhere anywhere state INVALID
3 66007 14M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
4 43 2325 ACCEPT all -- any lo anywhere anywhere
5 7154 543K output_rule all -- any any anywhere anywhere
6 7154 543K output all -- any any anywhere anywhere
Chain forward (1 references)
num pkts bytes target prot opt in out source destination
1 42677 4031K zone_lan_forward all -- br-lan any anywhere anywhere
2 0 0 zone_wan_forward all -- eth0.1 any anywhere anywhere
Chain forwarding_lan (1 references)
num pkts bytes target prot opt in out source destination
Chain forwarding_rule (1 references)
num pkts bytes target prot opt in out source destination
Chain forwarding_wan (1 references)
num pkts bytes target prot opt in out source destination
Chain input (1 references)
num pkts bytes target prot opt in out source destination
1 8095 660K zone_lan all -- br-lan any anywhere anywhere
2 30375 6620K zone_wan all -- eth0.1 any anywhere anywhere
Chain input_lan (1 references)
num pkts bytes target prot opt in out source destination
Chain input_rule (1 references)
num pkts bytes target prot opt in out source destination
Chain input_wan (1 references)
num pkts bytes target prot opt in out source destination
Chain output (1 references)
num pkts bytes target prot opt in out source destination
1 7154 543K zone_lan_ACCEPT all -- any any anywhere anywhere
2 7063 521K zone_wan_ACCEPT all -- any any anywhere anywhere
Chain output_rule (1 references)
num pkts bytes target prot opt in out source destination
Chain reject (4 references)
num pkts bytes target prot opt in out source destination
1 2586 132K REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
2 15814 2394K REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain syn_flood (1 references)
num pkts bytes target prot opt in out source destination
1 2667 132K RETURN tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50
2 0 0 DROP all -- any any anywhere anywhere
Chain zone_lan (1 references)
num pkts bytes target prot opt in out source destination
1 8095 660K input_lan all -- any any anywhere anywhere
2 8095 660K zone_lan_ACCEPT all -- any any anywhere anywhere
Chain zone_lan_ACCEPT (2 references)
num pkts bytes target prot opt in out source destination
1 8095 660K ACCEPT all -- br-lan any anywhere anywhere
2 91 21674 ACCEPT all -- any br-lan anywhere anywhere
Chain zone_lan_DROP (0 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- br-lan any anywhere anywhere
2 0 0 DROP all -- any br-lan anywhere anywhere
Chain zone_lan_MSSFIX (0 references)
num pkts bytes target prot opt in out source destination
1 0 0 TCPMSS tcp -- any br-lan anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
Chain zone_lan_REJECT (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 reject all -- br-lan any anywhere anywhere
2 0 0 reject all -- any br-lan anywhere anywhere
Chain zone_lan_forward (1 references)
num pkts bytes target prot opt in out source destination
1 42677 4031K zone_wan_ACCEPT all -- any any anywhere anywhere
2 0 0 forwarding_lan all -- any any anywhere anywhere
3 0 0 zone_lan_REJECT all -- any any anywhere anywhere
Chain zone_wan (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:1194
2 0 0 ACCEPT udp -- any any anywhere anywhere udp dpts:7070:7080
3 0 0 ACCEPT udp -- any any anywhere anywhere udp dpt:5060
4 11975 4094K ACCEPT udp -- any any anywhere anywhere udp dpt:68
5 18400 2526K input_wan all -- any any anywhere anywhere
6 18400 2526K zone_wan_REJECT all -- any any anywhere anywhere
Chain zone_wan_ACCEPT (2 references)
num pkts bytes target prot opt in out source destination
1 0 0 ACCEPT all -- eth0.1 any anywhere anywhere
2 49740 4552K ACCEPT all -- any eth0.1 anywhere anywhere
Chain zone_wan_DROP (0 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- eth0.1 any anywhere anywhere
2 0 0 DROP all -- any eth0.1 anywhere anywhere
Chain zone_wan_MSSFIX (1 references)
num pkts bytes target prot opt in out source destination
1 15755 801K TCPMSS tcp -- any eth0.1 anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
Chain zone_wan_REJECT (2 references)
num pkts bytes target prot opt in out source destination
1 18400 2526K reject all -- eth0.1 any anywhere anywhere
2 0 0 reject all -- any eth0.1 anywhere anywhere
Chain zone_wan_forward (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 forwarding_wan all -- any any anywhere anywhere
2 0 0 zone_wan_REJECT all -- any any anywhere anywhere
root@OpenWrt:~#