Chain INPUT (policy ACCEPT 135K packets, 1189M bytes) pkts bytes target prot opt in out source destination 0 0 ironic-inspector udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 5238 392K LIBVIRT_INP all -- * * 0.0.0.0/0 0.0.0.0/0 7493 44M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 21 1260 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:19885 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 LIBVIRT_FWX all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWI all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWO all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 85575 packets, 9539K bytes) pkts bytes target prot opt in out source destination 5198 1086K LIBVIRT_OUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain LIBVIRT_FWI (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWO (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWX (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_INP (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_OUT (1 references) pkts bytes target prot opt in out source destination Chain ironic-inspector (1 references) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable