| *nat |
| :PREROUTING ACCEPT [0:0] |
| :INPUT ACCEPT [0:0] |
| :OUTPUT ACCEPT [8:656] |
| :POSTROUTING ACCEPT [8:656] |
| COMMIT |
| |
| *mangle |
| :PREROUTING ACCEPT [794:190738] |
| :INPUT ACCEPT [794:190738] |
| :FORWARD ACCEPT [0:0] |
| :OUTPUT ACCEPT [991:170303] |
| :POSTROUTING ACCEPT [991:170303] |
| COMMIT |
| |
| *raw |
| :PREROUTING ACCEPT [794:190738] |
| :OUTPUT ACCEPT [991:170303] |
| COMMIT |
| |
| *filter |
| :INPUT DROP [0:0] |
| :FORWARD DROP [0:0] |
| :OUTPUT ACCEPT [991:170303] |
| -A INPUT -i lo -j ACCEPT |
| -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT |
| -A INPUT -p ipv6-icmp -j ACCEPT |
| -A OUTPUT -p tcp -m tcp --dport 137 -j REJECT --reject-with icmp6-port-unreachable |
| -A OUTPUT -p udp -m udp --dport 137 -j REJECT --reject-with icmp6-port-unreachable |
| COMMIT |
