Flags: X - disabled, I - invalid, D - dynamic 

 0   ;;; default configuration

     chain=input action=accept protocol=icmp 

 1   ;;; default configuration

     chain=input action=accept connection-state=established 

 2   ;;; default configuration

     chain=input action=accept connection-state=related 

 3 X ;;; default configuration

     chain=input action=drop in-interface=ether1-gateway 

 4   chain=input action=accept protocol=tcp in-interface=ether1-gateway dst-port=1723 

 5   chain=input action=accept protocol=gre in-interface=ether1-gateway 

 6   chain=input action=reject reject-with=tcp-reset protocol=tcp in-interface=ether1-gateway 

 7   ;;; default configuration

     chain=forward action=accept connection-state=established 

 8   ;;; default configuration

     chain=forward action=accept connection-state=related 

 9   ;;; default configuration

     chain=forward action=drop connection-state=invalid