*nat :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [8:656] :POSTROUTING ACCEPT [8:656] COMMIT *mangle :PREROUTING ACCEPT [794:190738] :INPUT ACCEPT [794:190738] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [991:170303] :POSTROUTING ACCEPT [991:170303] COMMIT *raw :PREROUTING ACCEPT [794:190738] :OUTPUT ACCEPT [991:170303] COMMIT *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [991:170303] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p ipv6-icmp -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 137 -j REJECT --reject-with icmp6-port-unreachable -A OUTPUT -p udp -m udp --dport 137 -j REJECT --reject-with icmp6-port-unreachable COMMIT