Chain FORWARD (policy DROP) target prot opt source destination ACCEPT tcp -- 192.168.1.0/24 anywhere state NEW,RELATED,ESTABLISHED ACCEPT tcp -- anywhere 192.168.1.0/24 state RELATED,ESTABLISHED ACCEPT icmp -- 192.168.1.0/24 anywhere state NEW,RELATED,ESTABLISHED ACCEPT icmp -- anywhere 192.168.1.0/24 state RELATED,ESTABLISHED