option iptables option clearall option createchains policy ACCEPT { table filter chain (INPUT FORWARD OUTPUT); table mangle chain (PREROUTING OUTPUT); table nat chain (PREROUTING POSTROUTING OUTPUT); }