Minus fw rules excerpt

--- IPv4 ---

Chain INPUT (policy DROP 112K packets, 15M bytes)
 pkts bytes target     prot opt in     out     source               destination
54905 6818K ACCEPT     all  --  lo     any     anywhere             anywhere
    7   428 DROP       all  --  any    any     anywhere             anywhere             state INVALID
6225K 7414M ACCEPT     all  --  any    any     anywhere             anywhere             state RELATED,ESTABLISHED
81532 5032K ACCEPT     all  --  lan0   any     anywhere             anywhere
(( ... a few allowed ports ... ))

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  413 16520 DROP       all  --  any    any     anywhere             anywhere             state INVALID
1186K  999M ACCEPT     all  --  any    any     anywhere             anywhere             state RELATED,ESTABLISHED
 7596  463K ACCEPT     all  --  lan0   any     anywhere             anywhere
    0     0 ACCEPT     all  --  dmz0   www0    anywhere             anywhere
(( ... a few allowed ports ... ))

Chain OUTPUT (policy ACCEPT 3835K packets, 331M bytes)
 pkts bytes target     prot opt in     out     source               destination

--- IPv4 NAT ---

Chain PREROUTING (policy ACCEPT 217K packets, 28M bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  www0   any     anywhere             anywhere             tcp dpt:XXXX to:172.17.0.10:XXXX
(( ... a few DNAT ports ... ))

Chain INPUT (policy ACCEPT 79673 packets, 4881K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 88333 packets, 9426K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain POSTROUTING (policy ACCEPT 18663 packets, 1255K bytes)
 pkts bytes target     prot opt in     out     source               destination
76964 8617K MASQUERADE  all  --  any    www0    anywhere             anywhere

--- IPv6 ---

Chain INPUT (policy DROP 10 packets, 1040 bytes)
 pkts bytes target     prot opt in     out     source               destination
   12   868 ACCEPT     all      lo     any     anywhere             anywhere
 1707  130K ACCEPT     ipv6-icmp    any    any     fe80::/10            anywhere
    4   240 DROP       all      any    any     anywhere             anywhere             state INVALID
 104K   45M ACCEPT     all      any    any     anywhere             anywhere             state RELATED,ESTABLISHED
    4   288 ACCEPT     all      any    any     anywhere             anywhere             PHYSDEV match --physdev-in lan0
(( ... a few allowed ports ... ))

Chain FORWARD (policy DROP 668 packets, 88572 bytes)
 pkts bytes target     prot opt in     out     source               destination
 1069 89348 ACCEPT     ipv6-icmp    any    any     fe80::/10            anywhere
    0     0 DROP       all      any    any     anywhere             anywhere             state INVALID
 3557 1200K ACCEPT     all      any    any     anywhere             anywhere             state RELATED,ESTABLISHED
  328 23570 ACCEPT     all      any    any     anywhere             anywhere             PHYSDEV match --physdev-in lan0
    0     0 ACCEPT     all      any    any     anywhere             anywhere             PHYSDEV match --physdev-in dmz0 --physdev-out www0
(( ... a few allowed ports ... ))

Chain OUTPUT (policy ACCEPT 98018 packets, 13M bytes)
 pkts bytes target     prot opt in     out     source               destination

--- IPv6 bridge ---

Bridge table: broute

Bridge chain: BROUTING, entries: 1, policy: DROP
-p IPv6 -j ACCEPT