BusyBox v1.30.1 () built-in shell (ash)

_ _
| |.-----.-----.-----.| | | |.----.| |_
| - || _ | -
| || | | ||
|| |
|_|| |_||||_
||| |____|
|
| W I R E L E S S F R E E D O M


OpenWrt 19.07.8, r11887-05ab0164e7


root@ARS2:~# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ts-input all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6086
REJECT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:443 / OpenClash QUIC REJECT / ! match-set china_ip_route dst reject-with icmp-port-unreachable
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6086
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
input_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom input rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
syn_flood tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 / !fw3 /
zone_lan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_input all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ts-forward all -- 0.0.0.0/0 0.0.0.0/0
forwarding_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom forwarding rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
zone_lan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_forward all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
output_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom output rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED / !fw3 /
zone_lan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
zone_wan_output all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain MINIUPNPD (2 references)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 192.168.2.173 udp dpt:29994
ACCEPT udp -- 0.0.0.0/0 192.168.2.219 udp dpt:37716
ACCEPT udp -- 0.0.0.0/0 192.168.2.190 udp dpt:5353
ACCEPT tcp -- 0.0.0.0/0 192.168.2.167 tcp dpt:34716
ACCEPT udp -- 0.0.0.0/0 192.168.2.167 udp dpt:34716
ACCEPT udp -- 0.0.0.0/0 192.168.2.134 udp dpt:29994

Chain forwarding_lan_rule (1 references)
target prot opt source destination

Chain forwarding_rule (1 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

Chain forwarding_wan_rule (1 references)
target prot opt source destination

Chain input_lan_rule (1 references)
target prot opt source destination

Chain input_rule (1 references)
target prot opt source destination

Chain input_wan_rule (1 references)
target prot opt source destination

Chain output_lan_rule (1 references)
target prot opt source destination

Chain output_rule (1 references)
target prot opt source destination

Chain output_wan_rule (1 references)
target prot opt source destination

Chain reject (2 references)
target prot opt source destination
REJECT tcp -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / reject-with tcp-reset
REJECT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 / reject-with icmp-port-unreachable

Chain syn_flood (1 references)
target prot opt source destination
RETURN tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 25/sec burst 50 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain ts-forward (1 references)
target prot opt source destination
MARK all -- 0.0.0.0/0 0.0.0.0/0 MARK set 0x40000
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 mark match 0x40000
DROP all -- 100.64.0.0/10 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0

Chain ts-input (1 references)
target prot opt source destination
ACCEPT all -- 100.124.249.38 0.0.0.0/0
RETURN all -- 100.115.92.0/23 0.0.0.0/0
DROP all -- 100.64.0.0/10 0.0.0.0/0

Chain zone_lan_dest_ACCEPT (4 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_lan_forward (1 references)
target prot opt source destination
forwarding_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan forwarding rule chain /
zone_wan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Zone lan to wan forwarding policy /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port forwards /
zone_lan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_lan_input (1 references)
target prot opt source destination
input_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan input rule chain /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port redirections /
zone_lan_src_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_lan_output (1 references)
target prot opt source destination
output_lan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom lan output rule chain /
zone_lan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_lan_src_ACCEPT (1 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate NEW,UNTRACKED / !fw3 /

Chain zone_wan_dest_ACCEPT (2 references)
target prot opt source destination
DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID / !fw3: Prevent NAT leakage /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 ctstate INVALID / !fw3: Prevent NAT leakage /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_wan_dest_REJECT (1 references)
target prot opt source destination
reject all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
reject all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_wan_forward (2 references)
target prot opt source destination
forwarding_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan forwarding rule chain /
zone_lan_dest_ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Allow-IPSec-ESP /
zone_lan_dest_ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:500 / !fw3: Allow-ISAKMP /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port forwards /
MINIUPNPD all -- 0.0.0.0/0 0.0.0.0/0
zone_wan_dest_REJECT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_wan_input (2 references)
target prot opt source destination
input_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan input rule chain /
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:68 / !fw3: Allow-DHCP-Renew /
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmptype 8 / !fw3: Allow-Ping /
ACCEPT 2 -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Allow-IGMP /
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8897 / !fw3: linkease /
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:1688 / !fw3: kms /
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ctstate DNAT / !fw3: Accept port redirections /
MINIUPNPD all -- 0.0.0.0/0 0.0.0.0/0
zone_wan_src_DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_wan_output (2 references)
target prot opt source destination
output_wan_rule all -- 0.0.0.0/0 0.0.0.0/0 / !fw3: Custom wan output rule chain /
zone_wan_dest_ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /

Chain zone_wan_src_DROP (1 references)
target prot opt source destination
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
DROP all -- 0.0.0.0/0 0.0.0.0/0 / !fw3 /
root@ARS2:~#

Edit
Pub: 17 Mar 2022 11:25 UTC
Views: 35