Chain INPUT (policy ACCEPT 41809 packets, 10M bytes)
 pkts bytes target     prot opt in     out     source               destination         
8206K  677M INPUT_GUEST_NETWORK  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
8206K  677M INPUT_HIGH_UPNP  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
8171K  664M INPUT_HTTPMASQ  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
8171K  664M INPUT_HIGH_DNS  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
7845K  631M INPUT_HILINK  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
7845K  631M INPUT_BRIDGE  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
7845K  631M INPUT_SERVICE_ACL  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_SUBNET_FILTER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_APPFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_URLFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_SERVICE  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_FTP  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_IPSEC  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 368K   43M INPUT_FIREWALL  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  43M   30G FORWARD_HIGH_UPNP  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_HTTPMASQ  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_HIGH_DNS  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  276 14616 DROP       all  --  br+    br+     0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_IPFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_APPFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_URLFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  43M   30G FWD_SERVICE  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1054K   81M FWD_PORT_TRIGGER  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1054K   81M FWD_IPSEC  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1054K   81M FWD_FIREWALL  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
1054K   81M ACCEPT     all  --  br+    *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 7937K packets, 646M bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD_HIGH_UPNP (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     udp  --  br+    *       0.0.0.0/0            239.255.255.250     udp dpt:1900 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            239.255.255.250     udp dpt:1900 

Chain FWD_APPFLT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain FWD_FIREWALL (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   10   694 DROP       all  --  !br+   *       0.0.0.0/0            0.0.0.0/0           state NEW 

Chain FWD_HIGH_DNS (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  43M   30G FWD_URLFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 2687  222K ACCEPT     udp  --  br+    *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
 2652  411K ACCEPT     udp  --  !br+   *       0.0.0.0/0            0.0.0.0/0           udp spt:53 state RELATED,ESTABLISHED 

Chain FWD_HTTPMASQ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  131 14953 RETURN     udp  --  !br+   *       0.0.0.0/0            0.0.0.0/0           udp spt:53 state RELATED,ESTABLISHED domain_ip_record match record 

Chain FWD_IPFLT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain FWD_IPSEC (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain FWD_PORT_TRIGGER (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain FWD_SERVICE (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  42M   30G ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
1374K  107M FWD_SERVICE_DMZ  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
40006 3033K ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.5         tcp dpt:4466 
 3121  524K ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.3         udp dpt:10985 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.3         udp dpt:58341 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.3         udp dpt:15624 
    7  2266 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.9         udp dpt:4466 
 177K   13M ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.5         udp dpt:4466 
 1787  275K ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.9         tcp dpt:4466 
 1879  113K ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.5         tcp dpt:1443 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.3         tcp dpt:1443 
    3   156 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.3         tcp dpt:4466 
    3   970 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.3         udp dpt:4466 
   62 10268 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.9         udp dpt:24918 
   48  1960 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.9         tcp dpt:843 
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.9         tcp dpt:16000 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.9         udp dpt:5041 
   84  4376 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.9         tcp dpt:10893 
  302 19587 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.9         udp dpt:8363 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.3         udp dpt:44600 
11210  674K ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.6         tcp dpt:1443 
21388 1705K ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.6         tcp dpt:4466 
43498 4668K ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.6         udp dpt:4466 
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.2         udp dpt:10823 
    1    47 ACCEPT     udp  --  *      *       0.0.0.0/0            192.168.3.9         udp dpt:57031 
    4   200 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.3.9         tcp dpt:57031 
    0     0 ACCEPT     all  --  ppp256 *       0.0.0.0/0            224.0.0.0/4         

Chain FWD_SERVICE_DMZ (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain FWD_URLFLT (2 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_APPFLT (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_BRIDGE (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 RETURN     all  --  br1    *       0.0.0.0/0            192.168.155.1       
58818 8261K RETURN     all  --  br0    *       0.0.0.0/0            192.168.3.1         
    0     0 DROP       all  --  br+    *       0.0.0.0/0            192.168.3.1         
    7   672 DROP       all  --  br+    *       0.0.0.0/0            192.168.155.1       

Chain INPUT_FIREWALL (1 references)
 pkts bytes target     prot opt in     out     source               destination         
12966 1117K DROP       all  --  ppp256 *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT_FTP (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_GUEST_NETWORK (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_HIGH_DNS (1 references)
 pkts bytes target     prot opt in     out     source               destination         
8171K  664M INPUT_URLFLT  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 150K 9490K ACCEPT     udp  --  br+    *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 
 175K   24M ACCEPT     udp  --  !br+   *       0.0.0.0/0            0.0.0.0/0           udp spt:53 state RELATED,ESTABLISHED 

Chain INPUT_HIGH_UPNP (1 references)
 pkts bytes target     prot opt in     out     source               destination         
35021   13M ACCEPT     udp  --  br+    *       0.0.0.0/0            239.255.255.250     udp dpt:1900 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            239.255.255.250     udp dpt:1900 

Chain INPUT_HILINK (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_HTTPMASQ (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6029  718K RETURN     udp  --  !br+   *       0.0.0.0/0            0.0.0.0/0           udp spt:53 state RELATED,ESTABLISHED domain_ip_record match record 

Chain INPUT_IPSEC (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain INPUT_SERVICE (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    1    92 ACCEPT     udp  --  ppp256 *       0.0.0.0/0            0.0.0.0/0           udp dpt:500 
    0     0 ACCEPT     udp  --  ppp256 *       0.0.0.0/0            0.0.0.0/0           udp dpt:4500 
    0     0 ACCEPT     esp  --  ppp256 *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     2    --  ppp256 *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT_SERVICE_ACL (1 references)
 pkts bytes target     prot opt in     out     source               destination         
6771K  544M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
 624K   37M ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0           
    5   212 ACCEPT     tcp  --  !br+   *       0.0.0.0/0            0.0.0.0/0           tcp dpt:7547 
    0     0 ACCEPT     tcp  --  br+    *       0.0.0.0/0            0.0.0.0/0           tcp dpt:631 
 7328  423K ACCEPT     tcp  --  br+    *       0.0.0.0/0            0.0.0.0/0           multiport dports 37215,37443 
  753 42127 ACCEPT     tcp  --  br+    *       0.0.0.0/0            0.0.0.0/0           multiport dports 80,443 
 4109  160K ACCEPT     icmp --  br+    *       0.0.0.0/0            0.0.0.0/0           
  298 20802 ACCEPT     tcp  --  br+    *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,138,139,445 
 4855  815K ACCEPT     udp  --  br+    *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,138,139,445 
16913  730K DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 21,990,80,443,137,138,139,445,37215,37443,23 
    0     0 DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           multiport dports 137,138,139,445 
48424 4155K DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT_SUBNET_FILTER (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  154 51798 ACCEPT     all  --  *      *       0.0.0.0              0.0.0.0/0           
    0     0 DROP       all  --  br0    *      !192.168.3.0/24       0.0.0.0/0           
    0     0 DROP       all  --  br1    *      !192.168.155.0/24     0.0.0.0/0           

Chain INPUT_URLFLT (2 references)
 pkts bytes target     prot opt in     out     source               destination         
