et
ip6tables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all anywhere anywhere /* !fw3 */
input_rule all anywhere anywhere /* !fw3: Custom input rule chain */
ACCEPT all anywhere anywhere ctstate RELATED,ESTABLISHED /* !fw3 */
DROP all anywhere anywhere ctstate INVALID /* !fw3 */
syn_flood tcp anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN /* !fw3 */
zone_lan_input all anywhere anywhere /* !fw3 */
zone_wan_input all anywhere anywhere /* !fw3 */
zone_wan_input all anywhere anywhere /* !fw3 */
zone_wan_input all anywhere anywhere /* !fw3 */
Chain FORWARD (policy DROP)
target prot opt source destination
forwarding_rule all anywhere anywhere /* !fw3: Custom forwarding rule chain */
ACCEPT all anywhere anywhere ctstate RELATED,ESTABLISHED /* !fw3 */
DROP all anywhere anywhere ctstate INVALID /* !fw3 */
zone_lan_forward all anywhere anywhere /* !fw3 */
zone_wan_forward all anywhere anywhere /* !fw3 */
zone_wan_forward all anywhere anywhere /* !fw3 */
zone_wan_forward all anywhere anywhere /* !fw3 */
reject all anywhere anywhere /* !fw3 */
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all anywhere anywhere /* !fw3 */
output_rule all anywhere anywhere /* !fw3: Custom output rule chain */
ACCEPT all anywhere anywhere ctstate RELATED,ESTABLISHED /* !fw3 */
DROP all anywhere anywhere ctstate INVALID /* !fw3 */
zone_lan_output all anywhere anywhere /* !fw3 */
zone_wan_output all anywhere anywhere /* !fw3 */
zone_wan_output all anywhere anywhere /* !fw3 */
zone_wan_output all anywhere anywhere /* !fw3 */
Chain MINIUPNPD (2 references)
target prot opt source destination
Chain forwarding_lan_rule (1 references)
target prot opt source destination
Chain forwarding_rule (1 references)
target prot opt source destination
Chain forwarding_wan_rule (1 references)
target prot opt source destination
Chain input_lan_rule (1 references)
target prot opt source destination
Chain input_rule (1 references)
target prot opt source destination
Chain input_wan_rule (1 references)
target prot opt source destination
Chain output_lan_rule (1 references)
target prot opt source destination
Chain output_rule (1 references)
target prot opt source destination
Chain output_wan_rule (1 references)
target prot opt source destination
Chain reject (4 references)
target prot opt source destination
REJECT tcp anywhere anywhere /* !fw3 */ reject-with tcp-reset
REJECT all anywhere anywhere /* !fw3 */ reject-with icmp6-port-unreachable
Chain syn_flood (1 references)
target prot opt source destination
RETURN tcp anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 25/sec burst 50 /* !fw3 */
DROP all anywhere anywhere /* !fw3 */
Chain zone_lan_dest_ACCEPT (4 references)
target prot opt source destination
ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_lan_forward (1 references)
target prot opt source destination
forwarding_lan_rule all anywhere anywhere /* !fw3: Custom lan forwarding rule chain */
zone_wan_dest_ACCEPT all anywhere anywhere /* !fw3: Zone lan to wan forwarding policy */
zone_lan_dest_ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_lan_input (1 references)
target prot opt source destination
input_lan_rule all anywhere anywhere /* !fw3: Custom lan input rule chain */
zone_lan_src_ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_lan_output (1 references)
target prot opt source destination
output_lan_rule all anywhere anywhere /* !fw3: Custom lan output rule chain */
zone_lan_dest_ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_lan_src_ACCEPT (1 references)
target prot opt source destination
ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_wan_dest_ACCEPT (2 references)
target prot opt source destination
DROP all anywhere anywhere ctstate INVALID /* !fw3: Prevent NAT leakage */
ACCEPT all anywhere anywhere /* !fw3 */
DROP all anywhere anywhere ctstate INVALID /* !fw3: Prevent NAT leakage */
ACCEPT all anywhere anywhere /* !fw3 */
DROP all anywhere anywhere ctstate INVALID /* !fw3: Prevent NAT leakage */
ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_wan_dest_REJECT (1 references)
target prot opt source destination
reject all anywhere anywhere /* !fw3 */
reject all anywhere anywhere /* !fw3 */
reject all anywhere anywhere /* !fw3 */
Chain zone_wan_forward (3 references)
target prot opt source destination
forwarding_wan_rule all anywhere anywhere /* !fw3: Custom wan forwarding rule chain */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp echo-request limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp echo-reply limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp destination-unreachable limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp packet-too-big limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp time-exceeded limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp bad-header limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp unknown-header-type limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Forward */
zone_lan_dest_ACCEPT esp anywhere anywhere /* !fw3: Allow-IPSec-ESP */
zone_lan_dest_ACCEPT udp anywhere anywhere udp dpt:isakmp /* !fw3: Allow-ISAKMP */
MINIUPNPD all anywhere anywhere
MINIUPNPD all anywhere anywhere
zone_wan_dest_REJECT all anywhere anywhere /* !fw3 */
Chain zone_wan_input (3 references)
target prot opt source destination
input_wan_rule all anywhere anywhere /* !fw3: Custom wan input rule chain */
DROP ipv6-icmp anywhere anywhere ipv6-icmp echo-request /* !fw3: Allow-Ping */
ACCEPT udp fc00::/6 fc00::/6 udp dpt:dhcpv6-client /* !fw3: Allow-DHCPv6 */
ACCEPT ipv6-icmp fe80::/10 anywhere ipv6-icmptype 130 code 0 /* !fw3: Allow-MLD */
ACCEPT ipv6-icmp fe80::/10 anywhere ipv6-icmptype 131 code 0 /* !fw3: Allow-MLD */
ACCEPT ipv6-icmp fe80::/10 anywhere ipv6-icmptype 132 code 0 /* !fw3: Allow-MLD */
ACCEPT ipv6-icmp fe80::/10 anywhere ipv6-icmptype 143 code 0 /* !fw3: Allow-MLD */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp echo-request limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp echo-reply limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp destination-unreachable limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp packet-too-big limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp time-exceeded limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp bad-header limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp unknown-header-type limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp router-solicitation limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-solicitation limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp router-advertisement limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT ipv6-icmp anywhere anywhere ipv6-icmp neighbour-advertisement limit: avg 1000/sec burst 5 /* !fw3: Allow-ICMPv6-Input */
ACCEPT udp anywhere anywhere udp dpt:64449 /* !fw3: Allow-OpenVPN-Inbound */
zone_wan_src_DROP all anywhere anywhere /* !fw3 */
Chain zone_wan_output (3 references)
target prot opt source destination
output_wan_rule all anywhere anywhere /* !fw3: Custom wan output rule chain */
zone_wan_dest_ACCEPT all anywhere anywhere /* !fw3 */
Chain zone_wan_src_DROP (1 references)
target prot opt source destination
DROP all anywhere anywhere /* !fw3 */
DROP all anywhere anywhere /* !fw3 */
DROP all anywhere anywhere /* !fw3 */