[root@compute11 ~]# iptables -S
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N neutron-filter-top
-N neutron-openvswi-FORWARD
-N neutron-openvswi-INPUT
-N neutron-openvswi-OUTPUT
-N neutron-openvswi-i697920eb-c
-N neutron-openvswi-local
-N neutron-openvswi-o697920eb-c
-N neutron-openvswi-s697920eb-c
-N neutron-openvswi-sg-chain
-N neutron-openvswi-sg-fallback
-A INPUT -j neutron-openvswi-INPUT
-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT
-A FORWARD -j neutron-filter-top
-A FORWARD -j neutron-openvswi-FORWARD
-A FORWARD -d 192.168.122.0/24 -o virbr0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 192.168.122.0/24 -i virbr0 -j ACCEPT
-A FORWARD -i virbr0 -o virbr0 -j ACCEPT
-A FORWARD -o virbr0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i virbr0 -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -j neutron-filter-top
-A OUTPUT -j neutron-openvswi-OUTPUT
-A neutron-filter-top -j neutron-openvswi-local
-A neutron-openvswi-FORWARD -m physdev --physdev-out tap697920eb-c2 --physdev-is-bridged -j neutron-openvswi-sg-chain
-A neutron-openvswi-FORWARD -m physdev --physdev-in tap697920eb-c2 --physdev-is-bridged -j neutron-openvswi-sg-chain
-A neutron-openvswi-INPUT -m physdev --physdev-in tap697920eb-c2 --physdev-is-bridged -j neutron-openvswi-o697920eb-c
-A neutron-openvswi-i697920eb-c -m state --state INVALID -j DROP
-A neutron-openvswi-i697920eb-c -m state --state RELATED,ESTABLISHED -j RETURN
-A neutron-openvswi-i697920eb-c -p tcp -m tcp --dport 22 -j RETURN
-A neutron-openvswi-i697920eb-c -p icmp -j RETURN
-A neutron-openvswi-i697920eb-c -s 192.168.1.2/32 -p udp -m udp --sport 67 --dport 68 -j RETURN
-A neutron-openvswi-i697920eb-c -j neutron-openvswi-sg-fallback
-A neutron-openvswi-o697920eb-c -p udp -m udp --sport 68 --dport 67 -j RETURN
-A neutron-openvswi-o697920eb-c -j neutron-openvswi-s697920eb-c
-A neutron-openvswi-o697920eb-c -p udp -m udp --sport 67 --dport 68 -j DROP
-A neutron-openvswi-o697920eb-c -m state --state INVALID -j DROP
-A neutron-openvswi-o697920eb-c -m state --state RELATED,ESTABLISHED -j RETURN
-A neutron-openvswi-o697920eb-c -j RETURN
-A neutron-openvswi-o697920eb-c -j neutron-openvswi-sg-fallback
-A neutron-openvswi-s697920eb-c -s 192.168.1.3/32 -m mac --mac-source FA:16:3E:40:A3:24 -j RETURN
-A neutron-openvswi-s697920eb-c -j DROP
-A neutron-openvswi-sg-chain -m physdev --physdev-out tap697920eb-c2 --physdev-is-bridged -j neutron-openvswi-i697920eb-c
-A neutron-openvswi-sg-chain -m physdev --physdev-in tap697920eb-c2 --physdev-is-bridged -j neutron-openvswi-o697920eb-c
-A neutron-openvswi-sg-chain -j ACCEPT
-A neutron-openvswi-sg-fallback -j DROP