Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 32 5332 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 4 224 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 syn_flood tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 484 41238 input_rule all -- * * 0.0.0.0/0 0.0.0.0/0 484 41238 input all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 172 14441 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 151 12653 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0 151 12653 forward all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID 87 8790 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 4 224 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0 31 2314 output_rule all -- * * 0.0.0.0/0 0.0.0.0/0 31 2314 output all -- * * 0.0.0.0/0 0.0.0.0/0 Chain forward (1 references) pkts bytes target prot opt in out source destination 151 12653 zone_lan_forward all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 zone_wan_forward all -- eth1 * 0.0.0.0/0 0.0.0.0/0 Chain forwarding_lan (1 references) pkts bytes target prot opt in out source destination Chain forwarding_rule (1 references) pkts bytes target prot opt in out source destination Chain forwarding_wan (1 references) pkts bytes target prot opt in out source destination Chain input (1 references) pkts bytes target prot opt in out source destination 85 5366 zone_lan all -- br-lan * 0.0.0.0/0 0.0.0.0/0 399 35872 zone_wan all -- eth1 * 0.0.0.0/0 0.0.0.0/0 Chain input_lan (1 references) pkts bytes target prot opt in out source destination Chain input_rule (1 references) pkts bytes target prot opt in out source destination Chain input_wan (1 references) pkts bytes target prot opt in out source destination Chain output (1 references) pkts bytes target prot opt in out source destination 31 2314 zone_lan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 28 1610 zone_wan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain output_rule (1 references) pkts bytes target prot opt in out source destination Chain reject (4 references) pkts bytes target prot opt in out source destination 0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain syn_flood (1 references) pkts bytes target prot opt in out source destination 0 0 RETURN tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 25/sec burst 50 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_lan (1 references) pkts bytes target prot opt in out source destination 85 5366 input_lan all -- * * 0.0.0.0/0 0.0.0.0/0 85 5366 zone_lan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_ACCEPT (3 references) pkts bytes target prot opt in out source destination 236 18019 ACCEPT all -- br-lan * 0.0.0.0/0 0.0.0.0/0 3 704 ACCEPT all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_DROP (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 DROP all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_MSSFIX (0 references) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * br-lan 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU Chain zone_lan_REJECT (0 references) pkts bytes target prot opt in out source destination 0 0 reject all -- br-lan * 0.0.0.0/0 0.0.0.0/0 0 0 reject all -- * br-lan 0.0.0.0/0 0.0.0.0/0 Chain zone_lan_forward (1 references) pkts bytes target prot opt in out source destination 151 12653 forwarding_lan all -- * * 0.0.0.0/0 0.0.0.0/0 151 12653 zone_lan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan (1 references) pkts bytes target prot opt in out source destination 399 35872 input_wan all -- * * 0.0.0.0/0 0.0.0.0/0 399 35872 zone_wan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_ACCEPT (3 references) pkts bytes target prot opt in out source destination 399 35872 ACCEPT all -- eth1 * 0.0.0.0/0 0.0.0.0/0 28 1610 ACCEPT all -- * eth1 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_DROP (0 references) pkts bytes target prot opt in out source destination 0 0 DROP all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 DROP all -- * eth1 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_MSSFIX (0 references) pkts bytes target prot opt in out source destination 0 0 TCPMSS tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU Chain zone_wan_REJECT (0 references) pkts bytes target prot opt in out source destination 0 0 reject all -- eth1 * 0.0.0.0/0 0.0.0.0/0 0 0 reject all -- * eth1 0.0.0.0/0 0.0.0.0/0 Chain zone_wan_forward (1 references) pkts bytes target prot opt in out source destination 0 0 forwarding_wan all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 zone_wan_ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0