BusyBox v1.30.1 () built-in shell (ash)
_ _
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -| || | | || || |
|_|| |_||||_||| |____|
|| W I R E L E S S F R E E D O M
OpenWrt 19.07.8, r11887-05ab0164e7
root@ARS2:~# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ts-input all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6086
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:443 / OpenClash QUIC REJECT / ! match-set china_ip_route dst reject-with icmp-port-unreachable
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6086
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
input_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom input rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
syn_flood tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 / !fw3 /
zone_lan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ts-forward all -- 0.0.0.0/0 0.0.0.0/0
forwarding_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom forwarding rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
zone_lan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
output_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom output rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
zone_lan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain MINIUPNPD (2 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 192.168.2.173 udp dpt:29994
ACCEPT udp -- 0.0.0.0/0 192.168.2.219 udp dpt:37716
ACCEPT udp -- 0.0.0.0/0 192.168.2.190 udp dpt:5353
ACCEPT tcp -- 0.0.0.0/0 192.168.2.167 tcp dpt:34716
ACCEPT udp -- 0.0.0.0/0 192.168.2.167 udp dpt:34716
ACCEPT udp -- 0.0.0.0/0 192.168.2.134 udp dpt:29994
Chain forwarding_lan_rule (1 references)
target prot opt source destination
Chain forwarding_rule (1 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Chain forwarding_wan_rule (1 references)
target prot opt source destination
Chain input_lan_rule (1 references)
target prot opt source destination
Chain input_rule (1 references)
target prot opt source destination
Chain input_wan_rule (1 references)
target prot opt source destination
Chain output_lan_rule (1 references)
target prot opt source destination
Chain output_rule (1 references)
target prot opt source destination
Chain output_wan_rule (1 references)
target prot opt source destination
Chain reject (2 references)
target prot opt source destination
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / reject-with tcp-reset
REJECT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / reject-with icmp-port-unreachable
Chain syn_flood (1 references)
target prot opt source destination
RETURN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 25/sec burst 50 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain ts-forward (1 references)
target prot opt source destination
MARK all -- 0.0.0.0/0 0.0.0.0/0 MARK set 0x40000
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 mark match 0x40000
DROP all -- 100.64.0.0/10 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
Chain ts-input (1 references)
target prot opt source destination
ACCEPT all -- 100.124.249.38 0.0.0.0/0
RETURN all -- 100.115.92.0/23 0.0.0.0/0
DROP all -- 100.64.0.0/10 0.0.0.0/0
Chain zone_lan_dest_ACCEPT (4 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_lan_forward (1 references)
target prot opt source destination
forwarding_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan forwarding rule chain /
zone_wan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Zone lan to wan forwarding policy /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port forwards /
zone_lan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_lan_input (1 references)
target prot opt source destination
input_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan input rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port redirections /
zone_lan_src_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_lan_output (1 references)
target prot opt source destination
output_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan output rule chain /
zone_lan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_lan_src_ACCEPT (1 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW,UNTRACKED / !fw3 /
Chain zone_wan_dest_ACCEPT (2 references)
target prot opt source destination
DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID / !fw3: Prevent NAT leakage /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID / !fw3: Prevent NAT leakage /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_wan_dest_REJECT (1 references)
target prot opt source destination
reject all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
reject all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_wan_forward (2 references)
target prot opt source destination
forwarding_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan forwarding rule chain /
zone_lan_dest_ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Allow-IPSec-ESP /
zone_lan_dest_ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:500 / !fw3: Allow-ISAKMP /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port forwards /
MINIUPNPD all -- 0.0.0.0/0 0.0.0.0/0
zone_wan_dest_REJECT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_wan_input (2 references)
target prot opt source destination
input_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan input rule chain /
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68 / !fw3: Allow-DHCP-Renew /
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmptype 8 / !fw3: Allow-Ping /
ACCEPT 2 -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Allow-IGMP /
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8897 / !fw3: linkease /
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:1688 / !fw3: kms /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port redirections /
MINIUPNPD all -- 0.0.0.0/0 0.0.0.0/0
zone_wan_src_DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_wan_output (2 references)
target prot opt source destination
output_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan output rule chain /
zone_wan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
Chain zone_wan_src_DROP (1 references)
target prot opt source destination
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
root@ARS2:~#