# Generated by iptables-save v1.4.12.2 on Fri Jan  2 12:04:37 2026
*raw
:PREROUTING ACCEPT [27800444:18906651553]
:OUTPUT ACCEPT [5976879:1458262846]
COMMIT
# Completed on Fri Jan  2 12:04:37 2026
# Generated by iptables-save v1.4.12.2 on Fri Jan  2 12:04:37 2026
*nat
:PREROUTING ACCEPT [411:70980]
:INPUT ACCEPT [233:24871]
:OUTPUT ACCEPT [338:28667]
:POSTROUTING ACCEPT [338:28667]
:DNSFILTER - [0:0]
:GAME_VSERVER - [0:0]
:LOCALSRV - [0:0]
:MAPE - [0:0]
:PCREDIRECT - [0:0]
:VPN_FUSION - [0:0]
:VPN_INPUT - [0:0]
:VSERVER - [0:0]
:VUPNP - [0:0]
[12442:618032] -A PREROUTING -i wgc5 -j VPN_INPUT
[1:72] -A POSTROUTING -o wgc5 -j MASQUERADE
[4660:1406461] -A POSTROUTING ! -s 100.92.143.13/32 -o eth4 -j MASQUERADE
[11487:559327] -A VPN_INPUT -j DNAT --to-destination 192.168.1.30
[0:0] -A VPN_INPUT -j RETURN
COMMIT
# Completed on Fri Jan  2 12:04:37 2026
# Generated by iptables-save v1.4.12.2 on Fri Jan  2 12:04:37 2026
*mangle
:PREROUTING ACCEPT [41132:6725188]
:INPUT ACCEPT [21860:3687749]
:FORWARD ACCEPT [10021:2624683]
:OUTPUT ACCEPT [14619:3191875]
:POSTROUTING ACCEPT [24642:5820078]
COMMIT
# Completed on Fri Jan  2 12:04:37 2026
# Generated by iptables-save v1.4.12.2 on Fri Jan  2 12:04:37 2026
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [112183:25081981]
:ACCESS_RESTRICTION - [0:0]
:DNSFILTER_DOT - [0:0]
:FUPNP - [0:0]
:IControls - [0:0]
:INPUT_ICMP - [0:0]
:INPUT_PING - [0:0]
:IPSEC_DROP_SUBNET_ICMP - [0:0]
:IPSEC_STRONGSWAN - [0:0]
:OUTPUT_DNS - [0:0]
:OUTPUT_IP - [0:0]
:OVPNCF - [0:0]
:OVPNCI - [0:0]
:OVPNSF - [0:0]
:OVPNSI - [0:0]
:PControls - [0:0]
:PTCSRVLAN - [0:0]
:PTCSRVWAN - [0:0]
:SECURITY - [0:0]
:VPNCF - [0:0]
:VPNCI - [0:0]
:WGCF - [0:0]
:WGCI - [0:0]
:WGNPControls - [0:0]
:WGSF - [0:0]
:WGSI - [0:0]
:default_block - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
:logdrop_dns - [0:0]
:logdrop_ip - [0:0]
[1142:81164] -A INPUT -p icmp -m icmp --icmp-type 8 -j INPUT_PING
[26597:6186350] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
[675:27072] -A INPUT -m state --state INVALID -j DROP
[147456:33281390] -A INPUT ! -i br0 -j PTCSRVWAN
[29421:3673615] -A INPUT -i br0 -j PTCSRVLAN
[0:0] -A INPUT ! -i lo -p tcp -m tcp --dport 5152 -j DROP
[29421:3673615] -A INPUT -i br0 -m state --state NEW -j ACCEPT
[146428:33217387] -A INPUT -i lo -m state --state NEW -j ACCEPT
[0:0] -A INPUT -p udp -m udp --sport 67 --dport 68 -j ACCEPT
[681:46160] -A INPUT -p icmp -j INPUT_ICMP
[1028:64003] -A INPUT -j WGSI
[1028:64003] -A INPUT -j WGCI
[3:132] -A INPUT -j OVPNSI
[3:132] -A INPUT -j OVPNCI
[3:132] -A INPUT -j DROP
[0:0] -A FORWARD -i wgc5 -j ACCEPT
[0:0] -A FORWARD -d 192.168.1.30/32 -j ACCEPT
[7648820:7114892700] -A FORWARD -j IPSEC_DROP_SUBNET_ICMP
[7648820:7114892700] -A FORWARD -j IPSEC_STRONGSWAN
[7641949:7112214133] -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
[6871:2678567] -A FORWARD -j WGSF
[6871:2678567] -A FORWARD -j OVPNSF
[0:0] -A FORWARD ! -i br0 -o eth4 -j DROP
[0:0] -A FORWARD -i br0 -o br0 -j ACCEPT
[452:21583] -A FORWARD -m state --state INVALID -j DROP
[0:0] -A FORWARD -i eth4 -j SECURITY
[0:0] -A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
[0:0] -A FORWARD -i br+ -p tcp -m tcp --dport 853 -j DNSFILTER_DOT
[6419:2656984] -A FORWARD -j WGCF
[6419:2656984] -A FORWARD -j OVPNCF
[6419:2656984] -A FORWARD -j VPNCF
[6419:2656984] -A FORWARD -i br0 -j ACCEPT
[0:0] -A FORWARD -j DROP
[189061:44585510] -A OUTPUT -j OUTPUT_IP
[681:46160] -A INPUT_ICMP -p icmp -m icmp --icmp-type 8 -j RETURN
[0:0] -A INPUT_ICMP -p icmp -m icmp --icmp-type 13 -j RETURN
[0:0] -A INPUT_ICMP -p icmp -j ACCEPT
[0:0] -A INPUT_PING -i eth4 -p icmp -j DROP
[0:0] -A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN
[0:0] -A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
[0:0] -A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN
[0:0] -A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -j DROP
[0:0] -A SECURITY -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j RETURN
[0:0] -A SECURITY -p icmp -m icmp --icmp-type 8 -j DROP
[0:0] -A SECURITY -j RETURN
[0:0] -A WGCF -o wgc5 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
[0:0] -A WGCF -o wgc5 -j ACCEPT
[0:0] -A WGCF -i wgc5 -j ACCEPT
[1025:63871] -A WGCI -i wgc5 -j ACCEPT
[0:0] -A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
[0:0] -A logaccept -j ACCEPT
[0:0] -A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options
[0:0] -A logdrop -j DROP
[0:0] -A logdrop_dns -j LOG --log-prefix "DROP_DNS " --log-tcp-sequence --log-tcp-options --log-ip-options
[0:0] -A logdrop_dns -j DROP
[0:0] -A logdrop_ip -j LOG --log-prefix "DROP_IP " --log-tcp-sequence --log-tcp-options --log-ip-options
[0:0] -A logdrop_ip -j DROP
COMMIT
# Completed on Fri Jan  2 12:04:37 2026