root@router-rst:~# iptables -L -v
Chain INPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
  884 71629 DROP       all  --  any    any     anywhere             anywhere            state INVALID
 791K   87M ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
    0     0 DROP       tcp  --  any    any     anywhere             anywhere            tcp option=!2 flags:SYN/SYN
51088 3832K input_rule  all  --  any    any     anywhere             anywhere
38465 3075K LAN_ACCEPT  all  --  any    any     anywhere             anywhere
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere
    0     0 ACCEPT     gre  --  any    any     anywhere             anywhere
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset
    0     0 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     anywhere             anywhere            state INVALID
84200 4026K TCPMSS     tcp  --  any    any     anywhere             anywhere            tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
3854K 3047M ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
90614 5480K forwarding_rule  all  --  any    any     anywhere             anywhere
    0     0 ACCEPT     all  --  br0    br0     anywhere             anywhere
41534 2133K ACCEPT     all  --  br0    vlan1   anywhere             anywhere
18004 1299K ACCEPT     all  --  tun0   any     anywhere             anywhere
26684 1721K ACCEPT     all  --  br0    tun0    anywhere             anywhere
    0     0 ACCEPT     all  --  br0    tun0    anywhere             anywhere

Chain LAN_ACCEPT (1 references)
 pkts bytes target     prot opt in     out     source               destination
    0     0 RETURN     all  --  vlan1  any     anywhere             anywhere
38465 3075K ACCEPT     all  --  any    any     anywhere             anywhere

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 DROP       all  --  any    any     anywhere             anywhere            state INVALID
 809K   82M ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED
19317 1170K output_rule  all  --  any    any     anywhere             anywhere
19317 1170K ACCEPT     all  --  any    any     anywhere             anywhere
    0     0 REJECT     tcp  --  any    any     anywhere             anywhere            reject-with tcp-reset
    0     0 REJECT     all  --  any    any     anywhere             anywhere            reject-with icmp-port-unreachable

Chain forward_vlan1 (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain forwarding_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
 4392  327K ACCEPT     all  --  vlan1  any     anywhere             172.20.6.2
    0     0 forward_vlan1  all  --  vlan1  any     anywhere             anywhere

Chain input_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
12623  757K ACCEPT     tcp  --  vlan1  any     anywhere             anywhere            tcp dpt:22
    0     0 input_vlan1  all  --  vlan1  any     anywhere             anywhere

Chain input_vlan1 (1 references)
 pkts bytes target     prot opt in     out     source               destination

Chain output_rule (1 references)
 pkts bytes target     prot opt in     out     source               destination
root@router-rst:~#