A forward láncra valaki légyszi' mondjon tanácsot, miért nem esik bele minden (forward láncra menő) csomag.
Az utolsó dropba még bőven jut, csak nem tudom milyen csomagok jutnak edáig.

0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough

1 ;;; drop invalid connection to internet
chain=forward action=drop connection-state=invalid log=no log-prefix="frwd-invalid-"

2 XI ;;; Bogon list drop
chain=forward action=drop src-address-list=bogons log=no log-prefix=""

3 ;;; FastTrack connection
chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""

4 XI ;;; Drop new connections from internet which are not dst-natted
chain=forward action=drop connection-state=new connection-nat-state=!dstnat log=no log-prefix=""

5 ;;; Allow forward traffic LAN >> WAN
chain=forward action=accept connection-state=established,related log=no log-prefix=""

6 XI chain=forward action=drop log=no log-prefix=""

[ Szerkesztve ]