Chain FORWARD (policy DROP) target prot opt source destination ACCEPT tcp -- 192.168.1.0/24 anywhere state NEW,ESTABLISHED ACCEPT tcp -- anywhere 192.168.1.0/24 state ESTABLISHED ACCEPT icmp -- anywhere anywhere