rendered paste bodyroot@OpenWrt:~# ipkg list_installed | grep "iptab"
iptables - 1.3.1-1 -
iptables-extra - 1.3.1-1 -
kmod-iptables-extra - 2.4.30-1 -
#############################
### iptables -vLnt mangle ###
#############################
Chain PREROUTING (policy ACCEPT 106K packets, 21M bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
6953 7955K MARK all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent MARK set 0x57
666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain INPUT (policy ACCEPT 16101 packets, 1497K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain FORWARD (policy ACCEPT 88416 packets, 20M bytes)
pkts bytes target prot opt in out source destination
6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain OUTPUT (policy ACCEPT 17579 packets, 1836K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain POSTROUTING (policy ACCEPT 106K packets, 22M bytes)
pkts bytes target prot opt in out source destination
6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
666 72103 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
#############################
### iptables -vLnt nat ###
#############################
Chain PREROUTING (policy ACCEPT 27243 packets, 2244K bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
1916 172K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
1 44 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain POSTROUTING (policy ACCEPT 3 packets, 325 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
1715 148K postrouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
1715 148K MASQUERADE all -- * vlan1 0.0.0.0/0 0.0.0.0/0
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 ipp2p v0.7.4 --bit
Chain OUTPUT (policy ACCEPT 48 packets, 3418 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto bittorrent
Chain postrouting_rule (1 references)
pkts bytes target prot opt in out source destination
Chain prerouting_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:1721 to:192.168.0.33
0 0 DNAT udp -- vlan1 * 0.0.0.0/0 0.0.0.0/0 udp dpt:7331 to:192.168.0.33
0 0 DNAT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57 to:192.168.0.34
#############################
### iptables -vLnt filter ###
#############################
Chain INPUT (policy DROP 1 packets, 78 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
13 868 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
878 86431 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp option=!2 flags:0x02/0x02
513 37538 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0
119 9120 ACCEPT all -- !vlan1 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 47 -- * * 0.0.0.0/0 0.0.0.0/0
313 14976 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
81 13442 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
6953 7955K all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
1203 57688 TCPMSS tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
14031 8616K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1841 161K forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- br0 br0 0.0.0.0/0 0.0.0.0/0
1841 161K ACCEPT all -- br0 vlan1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy DROP 1 packets, 40 bytes)
pkts bytes target prot opt in out source destination
0 0 all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
1468 190K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
2 128 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0
2 128 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:1721
0 0 ACCEPT udp -- vlan1 * 0.0.0.0/0 192.168.0.33 udp dpt:7331
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0x57
Chain input_rule (1 references)
pkts bytes target prot opt in out source destination
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination