Chain PREROUTING (policy ACCEPT 9705K packets, 6295M bytes) pkts bytes target prot opt in out source destination 9705K 6295M tcpre all -- * * 0.0.0.0/0 0.0.0.0/0 Chain INPUT (policy ACCEPT 47133 packets, 13M bytes) pkts bytes target prot opt in out source destination 47113 13M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xff Chain FORWARD (policy ACCEPT 9656K packets, 6282M bytes) pkts bytes target prot opt in out source destination 9656K 6282M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xff 9656K 6282M tcfor all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 132K packets, 36M bytes) pkts bytes target prot opt in out source destination 36810 16M tcout all -- * * 0.0.0.0/0 0.0.0.0/0 Chain POSTROUTING (policy ACCEPT 9693K packets, 6297M bytes) pkts bytes target prot opt in out source destination 9693K 6297M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 MARK and 0xff 9693K 6297M tcpost all -- * * 0.0.0.0/0 0.0.0.0/0 Chain tcfor (1 references) pkts bytes target prot opt in out source destination Chain tcout (1 references) pkts bytes target prot opt in out source destination Chain tcpost (1 references) pkts bytes target prot opt in out source destination Chain tcpre (1 references) pkts bytes target prot opt in out source destination 0 0 MARK all -- vlan1 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x100 4094K 613M MARK all -- vlan2 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x100 782 742K MARK all -- dmz0 * 0.0.0.0/0 0.0.0.0/0 MARK set 0x100