root@unknown:/tmp/home/root# iptables -L
Chain INPUT (policy DROP)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere            state INVALID
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
shlimit    tcp  --  anywhere             anywhere            tcp dpt:ssh state NEW
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp spt:bootps dpt:bootpc
ACCEPT     igmp --  anywhere             base-address.mcast.net/4
ACCEPT     udp  --  anywhere             base-address.mcast.net/4 udp dpt:!upnp
logdrop    all  --  anywhere             anywhere

Chain FORWARD (policy DROP)
target     prot opt source               destination
           all  --  anywhere             anywhere            account: network/netmask: 192.168.1.0/255.255.255.0 name: lan
           all  --  anywhere             anywhere            account: network/netmask: 192.168.2.0/255.255.255.0 name: lan1
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere            state INVALID
TCPMSS     tcp  --  anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
wanin      all  --  anywhere             anywhere
wanout     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Chain logdrop (2 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            state NEW limit: avg 10/sec burst 5 LOG level warning tcp-sequence tcp-options ip-options macdecode prefix `DROP '
DROP       all  --  anywhere             anywhere

Chain logreject (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            limit: avg 10/sec burst 5 LOG level warning tcp-sequence tcp-options ip-options macdecode prefix `REJECT '
REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset

Chain shlimit (1 references)
target     prot opt source               destination
           all  --  anywhere             anywhere            recent: SET name: shlimit side: source
logdrop    all  --  anywhere             anywhere            recent: UPDATE seconds: 60 hit_count: 6 name: shlimit side: source

Chain wanin (1 references)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             base-address.mcast.net/4

Chain wanout (1 references)
target     prot opt source               destination

root@unknown:/tmp/home/root# iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 2482 packets, 192K bytes)
 pkts bytes target     prot opt in     out     source               destination
    2  1495 WANPREROUTING  all  --  *      *       0.0.0.0/0            192.168.100.9
    0     0 DROP       all  --  vlan2  *       0.0.0.0/0            192.168.1.0/24
    0     0 DROP       all  --  vlan2  *       0.0.0.0/0            192.168.2.0/24

Chain POSTROUTING (policy ACCEPT 8 packets, 515 bytes)
 pkts bytes target     prot opt in     out     source               destination
 2051  127K MASQUERADE  all  --  *      vlan2   0.0.0.0/0            0.0.0.0/0
    0     0 SNAT       all  --  *      br0     192.168.1.0/24       192.168.1.0/24      to:192.168.1.1
    0     0 SNAT       all  --  *      br1     192.168.2.0/24       192.168.2.0/24      to:192.168.2.1

Chain OUTPUT (policy ACCEPT 667 packets, 43569 bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain WANPREROUTING (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           to:192.168.1.1



root@unknown:/tmp/home/root# iptables -nvL -t mangle
Chain PREROUTING (policy ACCEPT 742K packets, 666M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain INPUT (policy ACCEPT 2750 packets, 300K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain FORWARD (policy ACCEPT 739K packets, 665M bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 2362 packets, 337K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 741K packets, 666M bytes)
 pkts bytes target     prot opt in     out     source               destination
