Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 131 10588 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1 84 ACCEPT all -- eth0 * 10.1.0.0/16 10.2.0.0/16 policy match dir in pol ipsec reqid 1 proto 50 1 84 ACCEPT all -- * eth0 10.2.0.0/16 10.1.0.0/16 policy match dir out pol ipsec reqid 1 proto 50 Chain OUTPUT (policy DROP 4 packets, 472 bytes) pkts bytes target prot opt in out source destination 145 38604 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:22 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1 172 ACCEPT esp eth0 * ::/0 ::/0 3 2388 ACCEPT udp eth0 * ::/0 ::/0 udp spt:500 dpt:500 0 0 ACCEPT udp eth0 * ::/0 ::/0 udp spt:4500 dpt:4500 2 144 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmp type 135 3 200 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmp type 136 4 1578 ACCEPT tcp eth0 * fec0::15/128 ::/0 tcp spt:80 0 0 LOG all * * ::/0 ::/0 LOG flags 0 level 4 prefix ` IN: ' Chain FORWARD (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1 172 ACCEPT esp * eth0 ::/0 ::/0 2 1141 ACCEPT udp * eth0 ::/0 ::/0 udp spt:500 dpt:500 0 0 ACCEPT udp * eth0 ::/0 ::/0 udp spt:4500 dpt:4500 3 216 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmp type 135 2 128 ACCEPT icmpv6 * * ::/0 ::/0 ipv6-icmp type 136 6 552 ACCEPT tcp * eth0 ::/0 fec0::15/128 tcp dpt:80 0 0 LOG all * * ::/0 ::/0 LOG flags 0 level 4 prefix ` OUT: '