LAN=$(nvram get lan_ifname)
## CLEAR TABLES
-for T in filter nat mangle; do
+for T in filter nat; do
iptables -t $T -F
iptables -t $T -X
done
# allow
iptables -A FORWARD -i br0 -o br0 -j ACCEPT
- [ -z "$WAN" ] || iptables -A FORWARD -i $LAN -o $WAN -j ACCEPT
# reject (what to do with anything not allowed earlier)
# uses the default -P DROP