root@wrt01:~# DEBUG=true /etc/init.d/firewall restart && iptables -L -v
Firewall stopped, NAT disabled, everything to ACCEPT
Firewall loading ...
Interfaces:
WAN: ppp0 / eth0.1
LAN: br-lan / eth0.0
Clearing table filter - Done
Clearing table nat - Done
User rules loading ...
Done.
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
2 80 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 DROP tcp -- any any anywhere anywhere tcp option=!2 flags:SYN/SYN
0 0 input_wan all -- ppp0 any anywhere anywhere
0 0 input_lan all -- br-lan any anywhere anywhere
0 0 ACCEPT icmp -- any any anywhere anywhere
0 0 ACCEPT gre -- any any anywhere anywhere
0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
0 0 TCPMSS tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 forwarding_rule all -- any any anywhere anywhere
0 0 forwarding_wan all -- ppp0 any anywhere anywhere
0 0 ACCEPT all -- br-lan br-lan anywhere anywhere
0 0 ACCEPT all -- br-lan ppp0 anywhere anywhere
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere state INVALID
2 200 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 output_rule all -- any any anywhere anywhere
0 0 ACCEPT all -- any any anywhere anywhere
0 0 REJECT tcp -- any any anywhere anywhere reject-with tcp-reset
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain forwarding_rule (1 references)
pkts bytes target prot opt in out source destination
Chain forwarding_wan (1 references)
pkts bytes target prot opt in out source destination
Chain input_lan (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- ppp0 any anywhere anywhere
0 0 RETURN all -- eth0.1 any anywhere anywhere
0 0 ACCEPT all -- any any 192.168.13.0/24 anywhere
Chain input_wan (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere tcp dpt:22
Chain output_rule (1 references)
pkts bytes target prot opt in out source destination
root@wrt01:~#