BusyBox v1.13.4 (2010-08-12 03:24:38 CEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

root@WRT54G-TM:~# nvram show 2>/dev/null | grep 'br[0123]'
br1_netmask=255.255.255.0
chilli_interface=br0
mdhcpd=br1>On>100>50>1440 br2>On>100>50>1440 br3>On>100>50>3600
wl0_br1_netmask=255.255.255.0
bridgesif=br1>vlan2>63 br2>wl0.1>63 br3>vlan3>63
br2_bridged=0
br3_multicast=0
br2_nat=1
br2_netmask=255.255.255.0
br3_mtu=1492
wl0_br1_nat=0
wl0_br1_enable=0
br1_mtu=1492
br3_bridged=0
br1_multicast=0
br3_netmask=255.255.255.0
br1_ipaddr=192.168.2.1
wl1_br1_nat=0
lan_ifname=br0
br2_ipaddr=192.168.3.1
wl1_br1_enable=0
iptables -I FORWARD -i br1 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT
iptables -I FORWARD -i br2 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br2 -m state --state NEW -j DROP
iptables -I INPUT -i br2 -m state --state NEW -j DROP
iptables -I INPUT -i br2 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br2 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br2 -p tcp --dport 53 -j ACCEPT
iptables -I FORWARD -i br3 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br3 -m state --state NEW -j DROP
iptables -I INPUT -i br3 -m state --state NEW -j DROP
iptables -I INPUT -i br3 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br3 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br3 -p tcp --dport 53 -j ACCEPT
wl0_br1_ipaddr=0.0.0.0
br3_nat=1
ftefhrN0JuAz40PDsOnw5mEeNbr3B3up4qw4h9JhjN1CfdZEsxL1fBA/aLMCAwEA
br1_nat=1
br2_mtu=1492
bridges=br1>On>32768>1492 br2>On>32768>1492 br3>On>32768>1492
br3_ipaddr=192.168.4.1
br2_multicast=0
br0_mtu=1500
br1_bridged=0
rflow_if=br0
root@WRT54G-TM:~# nvram show 2>/dev/null | grep '192\.168\.[1234]\.' | grep -vE
'(forward|static|lease)'
syslogd_rem_ip=192.168.1.103
http_client_ip=192.168.1.105
br1_ipaddr=192.168.2.1
lan_ipaddr=192.168.1.1
sip_domain=192.168.1.1
br2_ipaddr=192.168.3.1
br3_ipaddr=192.168.4.1
root@WRT54G-TM:~# nvram get rc_firewall
#Save Firewall

iptables -I FORWARD -i br1 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br1 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br1 -p tcp --dport 53 -j ACCEPT

iptables -I FORWARD -i br2 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br2 -m state --state NEW -j DROP
iptables -I INPUT -i br2 -m state --state NEW -j DROP
iptables -I INPUT -i br2 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br2 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br2 -p tcp --dport 53 -j ACCEPT

iptables -I FORWARD -i br3 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br3 -m state --state NEW -j DROP
iptables -I INPUT -i br3 -m state --state NEW -j DROP
iptables -I INPUT -i br3 -p udp --dport 67 -j ACCEPT
iptables -I INPUT -i br3 -p udp --dport 53 -j ACCEPT
iptables -I INPUT -i br3 -p tcp --dport 53 -j ACCEPT

iptables -t nat -I POSTROUTING -o `nvram get wan_ifname` -j MASQUERADE
root@WRT54G-TM:~#