Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination
1    MASQUERADE  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
2    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500
3    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
5    REJECT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:67 reject-with icmp-port-unreachable
6    REJECT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:53 reject-with icmp-port-unreachable
7    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22
8    DROP       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpts:0:1023
9    DROP       udp  --  0.0.0.0/0            0.0.0.0/0           udp dpts:0:1023

Chain FORWARD (policy DROP)
num  target     prot opt source               destination
1    DROP       all  --  0.0.0.0/0            10.5.0.0/16
2    ACCEPT     all  --  10.5.0.0/16          0.0.0.0/0
3    ACCEPT     all  --  0.0.0.0/0            10.5.0.0/16

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination
1    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
2    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp spt:500 dpt:500
