rendered paste bodyiptables -L -n -v -t filter
---------------------------
root@OpenWrt:~# iptables -L -n -v -t filter
Chain INPUT (policy DROP 2 packets, 96 bytes)
pkts bytes target prot opt in out source destination
142 8036 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
707 55936 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
27 1224 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02
31311 1559K input_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 flags:0x17/0x02
126 20941 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0
1 60 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
29215 1422K REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
1965 117K REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
10483 503K TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
277K 47M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
8895 442K forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0
8860 440K ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
31134 1426K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
11 714 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0
11 714 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
35 1680 ACCEPT tcp -- vlan1 * 0.0.0.0/0 192.168.1.2 tcp dpt:80
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
2 96 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
iptables -L -n -v -t nat
------------------------
Chain PREROUTING (policy ACCEPT 36151 packets, 1798K bytes)
pkts bytes target prot opt in out source destination
36145 1796K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 15 packets, 688 bytes)
pkts bytes target prot opt in out source destination
33520 1388K postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
33509 1388K MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 7 packets, 434 bytes)
pkts bytes target prot opt in out source destination
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
2 96 ACCEPT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22
9 432 DNAT tcp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 to:192.168.1.2