rendered paste bodyroot@OpenWrt:~# ipkg list_installed | grep "iptab"
iptables - 1.3.1-1 -
iptables-extra - 1.3.1-1 -
kmod-iptables-extra - 2.4.30-1 -
#############################
### iptables -vLnt mangle ###
#############################
Chain PREROUTING (policy ACCEPT 89278 packets, 12M bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 MARK all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain INPUT (policy ACCEPT 15223 packets, 1419K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain FORWARD (policy ACCEPT 72586 packets, 11M bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain OUTPUT (policy ACCEPT 16682 packets, 1726K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain POSTROUTING (policy ACCEPT 89267 packets, 13M bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
#############################
### iptables -vLnt nat ###
#############################
Chain PREROUTING (policy ACCEPT 25355 packets, 2074K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
28 1511 prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain POSTROUTING (policy ACCEPT 3 packets, 325 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
21 848 postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
21 848 MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain OUTPUT (policy ACCEPT 46 packets, 3290 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:1721 to:192.168.0.33
0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:7331 to:192.168.0.33
0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 to:192.168.0.34
#############################
### iptables -vLnt filter ###
#############################
Chain INPUT (policy DROP 1 packets, 78 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
494 45350 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02
27 1463 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0
5 240 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
20 968 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
2 255 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
2 96 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
38 3147 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1 48 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0
1 48 ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 1 packets, 40 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
563 70260 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:1721
0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:7331
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination