root@OpenWrt:~# iptables -L -v; iptables -L -v -t nat
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
999 162K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN
545 30026 input_rule all -- any any anywhere anywhere
545 30026 ACCEPT all -- !vlan1 any anywhere anywhere
0 0 ACCEPT icmp -- any any anywhere anywhere
0 0 ACCEPT gre -- any any anywhere anywhere
0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 74 packets, 3984 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
57 2964 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
6 240 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
74 3984 forwarding_rule all -- any any anywhere anywhere
0 0 ACCEPT all -- br0 br0 anywhere anywhere
0 0 ACCEPT all -- br0 vlan1 anywhere anywhere
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
1703 588K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
14 1000 output_rule all -- any any anywhere anywhere
14 1000 ACCEPT all -- any any anywhere anywhere
0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain forward_vlan1 (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 forward_vlan1 all -- vlan1 any anywhere anywhere
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 input_vlan1 all -- vlan1 any anywhere anywhere
Chain input_vlan1 (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
Chain PREROUTING (policy ACCEPT 667 packets, 40277 bytes)
pkts bytes target prot opt in out source destination
667 40277 prerouting_rule all -- any any anywhere anywhere
Chain POSTROUTING (policy ACCEPT 12 packets, 2798 bytes)
pkts bytes target prot opt in out source destination
10 740 postrouting_rule all -- any any anywhere anywhere
0 0 MASQUERADE all -- any vlan1 anywhere anywhere
Chain OUTPUT (policy ACCEPT 12 packets, 2798 bytes)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 prerouting_vlan1 all -- vlan1 any anywhere anywhere
Chain prerouting_vlan1 (1 references)
pkts bytes target prot opt in out source destination
root@OpenWrt:~#