iptables help - route wlan1 to rndis0

[atuctuc]

hallo,
i want to connect my laptop over wifi with my raspbery over usb on my lineageos phone.

i can ping from laptop (192.168.182.81) to the phone usb device
64 bytes from 192.168.45.180: icmp_seq=1 ttl=64 time=3.75 ms

but can't ping to the raspberry

rmnet_data1 10.23.244.46
rndis0 192.168.45.180 < usb thetherin - > raspberry: 192.168.45.157
wlan1 192.168.182.124 < wlan thethering -> laptop: 192.168.182.81

could please somebody help me, which iptables rule should be added to make this possible?

thanks for help

here my iptables:

:/data/data/com.termux/files/home # iptables -vL
Chain INPUT (policy ACCEPT 104 packets, 10498 bytes)
pkts bytes target prot opt in out source destination
12230 9878K afwall-input all -- any any anywhere anywhere
968K 2246M bw_INPUT all -- any any anywhere anywhere
968K 2246M fw_INPUT all -- any any anywhere anywhere

Chain FORWARD (policy ACCEPT 773 packets, 527K bytes)
pkts bytes target prot opt in out source destination
3795K 4556M oem_fwd all -- any any anywhere anywhere
3795K 4556M fw_FORWARD all -- any any anywhere anywhere
3795K 4556M bw_FORWARD all -- any any anywhere anywhere
3795K 4556M tetherctrl_FORWARD all -- any any anywhere anywhere

Chain OUTPUT (policy ACCEPT 90 packets, 10372 bytes)
pkts bytes target prot opt in out source destination
16533 1910K afwall all -- any any anywhere anywhere
650K 665M nm_qti_filter_ssdp_dropper all -- any any anywhere anywhere
650K 665M oem_out all -- any any anywhere anywhere
650K 665M fw_OUTPUT all -- any any anywhere anywhere
650K 665M st_OUTPUT all -- any any anywhere anywhere
650K 665M bw_OUTPUT all -- any any anywhere anywhere

Chain afwall (1 references)
pkts bytes target prot opt in out source destination
7542 1112K RETURN all -- any any anywhere anywhere state ESTABLISHED
0 0 afwall-vpn all -- any tun+ anywhere anywhere
0 0 afwall-vpn all -- any ppp+ anywhere anywhere
0 0 afwall-vpn all -- any tap+ anywhere anywhere
0 0 afwall-vpn all -- any any anywhere anywhere [goto] mark match 0x3c/0xfffc
0 0 afwall-vpn all -- any any anywhere anywhere [goto] mark match 0x40/0xfff8
0 0 afwall-wifi all -- any eth+ anywhere anywhere
1 342 afwall-wifi all -- any wlan+ anywhere anywhere
0 0 afwall-wifi all -- any tiwlan+ anywhere anywhere
0 0 afwall-wifi all -- any ra+ anywhere anywhere
0 0 afwall-wifi all -- any bnep+ anywhere anywhere
7755 689K afwall-3g all -- any rmnet+ anywhere anywhere
0 0 afwall-3g all -- any pdp+ anywhere anywhere
0 0 afwall-3g all -- any uwbr+ anywhere anywhere
0 0 afwall-3g all -- any wimax+ anywhere anywhere
0 0 afwall-3g all -- any vsnet+ anywhere anywhere
0 0 afwall-3g all -- any rmnet_sdio+ anywhere anywhere
0 0 afwall-3g all -- any ccmni+ anywhere anywhere
0 0 afwall-3g all -- any qmi+ anywhere anywhere
0 0 afwall-3g all -- any svnet0+ anywhere anywhere
0 0 afwall-3g all -- any ccemni+ anywhere anywhere
0 0 afwall-3g all -- any wwan+ anywhere anywhere
0 0 afwall-3g all -- any cdma_rmnet+ anywhere anywhere
0 0 afwall-3g all -- any clat4+ anywhere anywhere
0 0 afwall-3g all -- any cc2mni+ anywhere anywhere
0 0 afwall-3g all -- any bond1+ anywhere anywhere
0 0 afwall-3g all -- any rmnet_smux+ anywhere anywhere
0 0 afwall-3g all -- any ccinet+ anywhere anywhere
0 0 afwall-3g all -- any v4-rmnet+ anywhere anywhere
0 0 afwall-3g all -- any seth_w+ anywhere anywhere
0 0 afwall-3g all -- any v4-rmnet_data+ anywhere anywhere
0 0 afwall-3g all -- any rmnet_ipa+ anywhere anywhere
2084 207K afwall-3g all -- any rmnet_data+ anywhere anywhere
0 0 afwall-3g all -- any r_rmnet_data+ anywhere anywhere

Chain afwall-3g (23 references)
pkts bytes target prot opt in out source destination
9839 896K afwall-3g-postcustom all -- any any anywhere anywhere

Chain afwall-3g-fork (2 references)
pkts bytes target prot opt in out source destination
9839 896K afwall-3g-home all -- any any anywhere anywhere

Chain afwall-3g-home (1 references)
pkts bytes target prot opt in out source destination
2412 168K RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN all -- any any anywhere anywhere owner UID match vpn
0 0 RETURN all -- any any anywhere anywhere owner UID match network_stack
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a134
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a139
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a154
6 360 RETURN all -- any any anywhere anywhere owner UID match u0_a158
8 480 RETURN all -- any any anywhere anywhere owner UID match u0_a169
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a176
30 1880 RETURN all -- any any anywhere anywhere owner UID match u0_a178
26 1592 RETURN all -- any any anywhere anywhere owner UID match u0_a182
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a192
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a166
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
5669 482K afwall-reject all -- any any anywhere anywhere owner UID match 0-999999999

Chain afwall-3g-postcustom (1 references)
pkts bytes target prot opt in out source destination
9839 896K afwall-3g-fork all -- any any anywhere anywhere

Chain afwall-3g-roam (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN all -- any any anywhere anywhere owner UID match vpn
0 0 RETURN all -- any any anywhere anywhere owner UID match network_stack
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a134
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a139
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a154
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a158
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a169
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a178
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a182
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a166
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
0 0 afwall-reject all -- any any anywhere anywhere owner UID match 0-999999999

Chain afwall-3g-tether (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere owner UID match root udp dpt:domain
0 0 RETURN udp -- any any anywhere anywhere owner UID match nobody udp dpt:domain
0 0 RETURN udp -- any any anywhere anywhere owner UID match dns_tether udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match root tcp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match nobody tcp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match dns_tether tcp dpt:domain
0 0 afwall-3g-fork all -- any any anywhere anywhere

Chain afwall-input (1 references)
pkts bytes target prot opt in out source destination
9391 9647K RETURN all -- any any anywhere anywhere state ESTABLISHED

Chain afwall-reject (6 references)
pkts bytes target prot opt in out source destination
5669 482K NFLOG all -- any any anywhere anywhere nflog-prefix "{AFL}" nflog-group 40
5669 482K REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable

Chain afwall-tether (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
0 0 afwall-reject all -- any any anywhere anywhere

Chain afwall-tor (0 references)
pkts bytes target prot opt in out source destination

Chain afwall-tor-reject (0 references)
pkts bytes target prot opt in out source destination

Chain afwall-vpn (5 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN all -- any any anywhere anywhere owner UID match root
0 0 RETURN all -- any any anywhere anywhere owner UID match system
0 0 RETURN all -- any any anywhere anywhere owner UID match adb
0 0 RETURN all -- any any anywhere anywhere owner UID match media
0 0 RETURN all -- any any anywhere anywhere owner UID match vpn
0 0 RETURN all -- any any anywhere anywhere owner UID match drm
0 0 RETURN all -- any any anywhere anywhere owner UID match mdnsr
0 0 RETURN all -- any any anywhere anywhere owner UID match gps
0 0 RETURN all -- any any anywhere anywhere owner UID match clat
0 0 RETURN all -- any any anywhere anywhere owner UID match network_stack
0 0 RETURN all -- any any anywhere anywhere owner UID match shell
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a57
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a71
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a73
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a80
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a86
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a96
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a102
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a107
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a117
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a131
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a134
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a135
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a137
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a138
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a140
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a142
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a143
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a146
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a147
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a152
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a153
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a154
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a157
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a158
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a159
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a160
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a161
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a162
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a163
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a168
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a169
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a170
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a172
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a175
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a177
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a178
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a179
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a181
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a182
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a189
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a192
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a73
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a117
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a131
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a166
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
0 0 RETURN udp -- any any anywhere anywhere udp dpt:ntp owner UID match system
0 0 afwall-reject all -- any any anywhere anywhere owner UID match 0-999999999

Chain afwall-wifi (5 references)
pkts bytes target prot opt in out source destination
1 342 afwall-wifi-postcustom all -- any any anywhere anywhere

Chain afwall-wifi-fork (2 references)
pkts bytes target prot opt in out source destination
1 342 afwall-wifi-wan all -- any any anywhere anywhere

Chain afwall-wifi-lan (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
0 0 afwall-reject all -- any any anywhere anywhere

Chain afwall-wifi-postcustom (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- any any anywhere anywhere owner UID match dhcp
0 0 RETURN all -- any any anywhere anywhere owner UID match wifi
1 342 afwall-wifi-fork all -- any any anywhere anywhere

Chain afwall-wifi-tether (0 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere owner UID match root udp spt:bootps dpt:bootpc
0 0 RETURN udp -- any any anywhere anywhere owner UID match nobody udp spt:bootps dpt:bootpc
0 0 RETURN udp -- any any anywhere anywhere owner UID match network_stack udp spt:bootps dpt:bootpc
0 0 RETURN udp -- any any anywhere anywhere owner UID match root udp spt:domain
0 0 RETURN udp -- any any anywhere anywhere owner UID match nobody udp spt:domain
0 0 RETURN udp -- any any anywhere anywhere owner UID match dns_tether udp spt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match root tcp spt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match nobody tcp spt:domain
0 0 RETURN tcp -- any any anywhere anywhere owner UID match dns_tether tcp spt:domain
0 0 afwall-wifi-fork all -- any any anywhere anywhere

Chain afwall-wifi-wan (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain
0 0 RETURN all -- any any anywhere anywhere owner UID match vpn
1 342 RETURN all -- any any anywhere anywhere owner UID match network_stack
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a58
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a74
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a134
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a139
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a154
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a158
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a161
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a169
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a176
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a178
0 0 RETURN all -- any any anywhere anywhere owner UID match u0_a182
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a74
0 0 RETURN all -- any any anywhere anywhere owner UID match u10_a166
0 0 RETURN udp -- any any anywhere anywhere udp dpt:domain owner UID match root
0 0 RETURN tcp -- any any anywhere anywhere tcp dpt:domain owner UID match root
0 0 afwall-reject all -- any any anywhere anywhere owner UID match 0-999999999

Chain bw_FORWARD (1 references)
pkts bytes target prot opt in out source destination
0 0 bw_costly_tun0 all -- tun0 any anywhere anywhere
0 0 bw_costly_tun0 all -- any tun0 anywhere anywhere
0 0 bw_costly_rmnet_data3 all -- rmnet_data3 any anywhere anywhere
0 0 bw_costly_rmnet_data3 all -- any rmnet_data3 anywhere anywhere
466 501K bw_costly_rmnet_data1 all -- rmnet_data1 any anywhere anywhere
309 26240 bw_costly_rmnet_data1 all -- any rmnet_data1 anywhere anywhere
0 0 bw_costly_rmnet_data4 all -- rmnet_data4 any anywhere anywhere
0 0 bw_costly_rmnet_data4 all -- any rmnet_data4 anywhere anywhere

Chain bw_INPUT (1 references)
pkts bytes target prot opt in out source destination
968K 2246M bw_global_alert all -- any any anywhere anywhere
0 0 bw_costly_rmnet_data4 all -- rmnet_data4 any anywhere anywhere
13 3100 bw_costly_rmnet_data1 all -- rmnet_data1 any anywhere anywhere
0 0 bw_costly_rmnet_data3 all -- rmnet_data3 any anywhere anywhere
18 1153 bw_costly_tun0 all -- tun0 any anywhere anywhere
0 0 RETURN esp -- any any anywhere anywhere
0 0 RETURN all -- any any anywhere anywhere mark match 0x100000/0x100000
968K 2246M MARK all -- any any anywhere anywhere MARK or 0x100000

Chain bw_OUTPUT (1 references)
pkts bytes target prot opt in out source destination
650K 665M bw_global_alert all -- any any anywhere anywhere
0 0 bw_costly_rmnet_data4 all -- any rmnet_data4 anywhere anywhere
14 1958 bw_costly_rmnet_data1 all -- any rmnet_data1 anywhere anywhere
0 0 bw_costly_rmnet_data3 all -- any rmnet_data3 anywhere anywhere
25 1923 bw_costly_tun0 all -- any tun0 anywhere anywhere

Chain bw_costly_rmnet_data1 (4 references)
pkts bytes target prot opt in out source destination
802 533K bw_penalty_box all -- any any anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere ! quota rmnet_data1: 9223372036854775807 bytes reject-with icmp-port-unreachable

Chain bw_costly_rmnet_data3 (4 references)
pkts bytes target prot opt in out source destination
0 0 bw_penalty_box all -- any any anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere ! quota rmnet_data3: 9223372036854775807 bytes reject-with icmp-port-unreachable

Chain bw_costly_rmnet_data4 (4 references)
pkts bytes target prot opt in out source destination
0 0 bw_penalty_box all -- any any anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere ! quota rmnet_data4: 9223372036854775807 bytes reject-with icmp-port-unreachable

Chain bw_costly_shared (0 references)
pkts bytes target prot opt in out source destination
0 0 bw_penalty_box all -- any any anywhere anywhere

Chain bw_costly_tun0 (4 references)
pkts bytes target prot opt in out source destination
43 3076 bw_penalty_box all -- any any anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere ! quota tun0: 9223372036854775807 bytes reject-with icmp-port-unreachable

Chain bw_data_saver (1 references)
pkts bytes target prot opt in out source destination
1079K 1637M RETURN all -- any any anywhere anywhere

Chain bw_global_alert (3 references)
pkts bytes target prot opt in out source destination
2829K 4971M all -- any any anywhere anywhere ! quota globalAlert: 2097152 bytes

Chain bw_happy_box (1 references)
pkts bytes target prot opt in out source destination
3848K 4574M RETURN all -- any any anywhere anywhere match bpf pinned /sys/fs/bpf/prog_netd_skfilter_allowlist_xtbpf
1079K 1637M bw_data_saver all -- any any anywhere anywhere

Chain bw_penalty_box (5 references)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- any any anywhere anywhere match bpf pinned /sys/fs/bpf/prog_netd_skfilter_denylist_xtbpf reject-with icmp-port-unreachable
4928K 6212M bw_happy_box all -- any any anywhere anywhere

Chain fw_FORWARD (1 references)
pkts bytes target prot opt in out source destination

Chain fw_INPUT (1 references)
pkts bytes target prot opt in out source destination

Chain fw_OUTPUT (1 references)
pkts bytes target prot opt in out source destination

Chain nm_mdmprxy_doze_mode_skip (0 references)
pkts bytes target prot opt in out source destination

Chain nm_mdmprxy_iface_pkt_fwder (0 references)
pkts bytes target prot opt in out source destination

Chain nm_qti_filter_ssdp_dropper (1 references)
pkts bytes target prot opt in out source destination
0 0 DROP udp -- any r_rmnet_data+ anywhere anywhere udp dpt:1900
0 0 DROP udp -- any rmnet_data+ anywhere anywhere udp dpt:1900

Chain oem_fwd (1 references)
pkts bytes target prot opt in out source destination

Chain oem_out (1 references)
pkts bytes target prot opt in out source destination

Chain st_OUTPUT (1 references)
pkts bytes target prot opt in out source destination

Chain st_clear_caught (2 references)
pkts bytes target prot opt in out source destination

Chain st_clear_detect (0 references)
pkts bytes target prot opt in out source destination
0 0 REJECT all -- any any anywhere anywhere connmark match 0x2000000/0x2000000 reject-with icmp-port-unreachable
0 0 RETURN all -- any any anywhere anywhere connmark match 0x1000000/0x1000000
0 0 CONNMARK tcp -- any any anywhere anywhere u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0xffff0000=0x16030000&&0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x4&0xff0000=0x10000" CONNMARK or 0x1000000
0 0 CONNMARK udp -- any any anywhere anywhere u32 "0x0>>0x16&0x3c@0x8&0xffff0000=0x16fe0000&&0x0>>0x16&0x3c@0x14&0xff0000=0x10000" CONNMARK or 0x1000000
0 0 RETURN all -- any any anywhere anywhere connmark match 0x1000000/0x1000000
0 0 st_clear_caught tcp -- any any anywhere anywhere state ESTABLISHED u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0x0=0x0"
0 0 st_clear_caught udp -- any any anywhere anywhere

Chain st_penalty_log (0 references)
pkts bytes target prot opt in out source destination
0 0 CONNMARK all -- any any anywhere anywhere CONNMARK or 0x1000000
0 0 NFLOG all -- any any anywhere anywhere

Chain st_penalty_reject (0 references)
pkts bytes target prot opt in out source destination
0 0 CONNMARK all -- any any anywhere anywhere CONNMARK or 0x2000000
0 0 NFLOG all -- any any anywhere anywhere
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable

Chain tetherctrl_FORWARD (1 references)
pkts bytes target prot opt in out source destination
2018K 2652M bw_global_alert all -- any any anywhere anywhere
1421K 2601M tetherctrl_counters all -- rmnet_data1 wlan1 anywhere anywhere [goto] state RELATED,ESTABLISHED
308 21298 DROP all -- wlan1 rmnet_data1 anywhere anywhere state INVALID
588K 50M tetherctrl_counters all -- wlan1 rmnet_data1 anywhere anywhere [goto]
11 860 tetherctrl_counters all -- rmnet_data1 rndis0 anywhere anywhere [goto] state RELATED,ESTABLISHED
0 0 DROP all -- rndis0 rmnet_data1 anywhere anywhere state INVALID
19 1468 tetherctrl_counters all -- rndis0 rmnet_data1 anywhere anywhere [goto]
8072 662K DROP all -- any any anywhere anywhere

Chain tetherctrl_counters (4 references)
pkts bytes target prot opt in out source destination
8813 1292K RETURN all -- wlan1 rmnet_data3 anywhere anywhere
6138 3725K RETURN all -- rmnet_data3 wlan1 anywhere anywhere
27370 4752K RETURN all -- wlan1 rmnet_data2 anywhere anywhere
17898 2751K RETURN all -- rmnet_data2 wlan1 anywhere anywhere
1155K 103M RETURN all -- wlan1 rmnet_data1 anywhere anywhere
2571K 4440M RETURN all -- rmnet_data1 wlan1 anywhere anywhere
19 1468 RETURN all -- rndis0 rmnet_data1 anywhere anywhere
11 860 RETURN all -- rmnet_data1 rndis0 anywhere anywhere