Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns NFQUEUE udp -- anywhere anywhere NFQUEUE num 10000 Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy DROP) target prot opt source destination NFQUEUE udp -- anywhere 239.255.255.250 udp dpt:1900 NFQUEUE num 10001 ACCEPT all -- anywhere anywhere ctstate NEW,RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere