Chain INPUT (policy ACCEPT 108K packets, 1155M bytes) pkts bytes target prot opt in out source destination 0 0 ironic-inspector udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 5304 623K LIBVIRT_INP all -- * * 0.0.0.0/0 0.0.0.0/0 7796 42M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 23 1380 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:19885 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 LIBVIRT_FWX all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWI all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWO all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 76765 packets, 9182K bytes) pkts bytes target prot opt in out source destination 5272 1185K LIBVIRT_OUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain LIBVIRT_FWI (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWO (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWX (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_INP (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_OUT (1 references) pkts bytes target prot opt in out source destination Chain ironic-inspector (1 references) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable