Chain INPUT (policy ACCEPT 111K packets, 1155M bytes) pkts bytes target prot opt in out source destination 0 0 ironic-inspector udp -- eth0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 3850 501K LIBVIRT_INP all -- * * 0.0.0.0/0 0.0.0.0/0 6961 44M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 27 1620 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:19885 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 LIBVIRT_FWX all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWI all -- * * 0.0.0.0/0 0.0.0.0/0 0 0 LIBVIRT_FWO all -- * * 0.0.0.0/0 0.0.0.0/0 Chain OUTPUT (policy ACCEPT 75988 packets, 9233K bytes) pkts bytes target prot opt in out source destination 3805 1089K LIBVIRT_OUT all -- * * 0.0.0.0/0 0.0.0.0/0 Chain LIBVIRT_FWI (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWO (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_FWX (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_INP (1 references) pkts bytes target prot opt in out source destination Chain LIBVIRT_OUT (1 references) pkts bytes target prot opt in out source destination Chain ironic-inspector (1 references) pkts bytes target prot opt in out source destination 0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable