+ iptables -t raw -v -n -L Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination + iptables -t mangle -v -n -L Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination + iptables -t nat -v -n -L Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination + iptables -t filter -v -n -L Chain INPUT (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- br-0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- vxlan-0 * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT all -- * * 199.204.45.109 0.0.0.0/0 5645 12M openstack-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 3509 packets, 509K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * br-0 0.0.0.0/0 0.0.0.0/0 4 336 ACCEPT all -- * vxlan-0 0.0.0.0/0 0.0.0.0/0 Chain openstack-INPUT (1 references) pkts bytes target prot opt in out source destination 54 5228 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0 0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 255 5110 12M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 277 27893 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 48 2880 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:19885 0 0 ACCEPT udp -- * * 172.24.4.0/23 0.0.0.0/0 udp dpt:69 0 0 ACCEPT tcp -- * * 172.24.4.0/23 0.0.0.0/0 tcp dpt:6385 0 0 ACCEPT tcp -- * * 172.24.4.0/23 0.0.0.0/0 tcp dpt:80 0 0 ACCEPT tcp -- * * 172.24.4.0/23 0.0.0.0/0 tcp dpt:8000 0 0 ACCEPT tcp -- * * 172.24.4.0/23 0.0.0.0/0 tcp dpt:8003 0 0 ACCEPT tcp -- * * 172.24.4.0/23 0.0.0.0/0 tcp dpt:8004 10 1968 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 2/min burst 5 LOG flags 0 level 4 prefix "iptables dropped: " 156 36852 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited