admin@RT-AX58U-FAC0:/tmp/home/root# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
TCPMSS     tcp  --  anywhere             anywhere             tcpflags: SYN,RST/SYN TCPMSS clamp to PMTU
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere
DROP       all  --  anywhere             anywhere             state INVALID
ACCEPT     all  --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere             ctstate DNAT

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
OUTPUT_DNS  udp  --  anywhere             anywhere             udp dpt:domain u32 "0x0>>0x16&0x3c@0x8>>0xf&0x1=0x0"
OUTPUT_DNS  tcp  --  anywhere             anywhere             tcp dpt:domain u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x8>>0xf&0x1=0x0"
OUTPUT_IP  all  --  anywhere             anywhere

Chain ACCESS_RESTRICTION (0 references)
target     prot opt source               destination

Chain FUPNP (0 references)
target     prot opt source               destination

Chain ICAccept (0 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain ICDrop (0 references)
target     prot opt source               destination
DROP       all  --  anywhere             anywhere

Chain INPUT_ICMP (0 references)
target     prot opt source               destination

Chain OUTPUT_DNS (2 references)
target     prot opt source               destination
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|10706f697579747975696f706b6a666e6603636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0d72666a656a6e666a6e65666a6503636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|1131306166646d617361787373736171726b03636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0f376d667364666173646d6b676d726b03636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0d386d617361787373736171726b03636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0f3966646d617361787373736171726b03636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|1265666274686d6f6975796b6d6b6a6b6a677403636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|086861636b7563647403636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|076c696e77756469056633333232036e657400|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0f6c6b6a68676664736174727975696f03636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0b6d6e627663787a7a7a313203636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|077131313133333303746f7000|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|057371353230056633333232036e657400|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|077563746b6f6e6503636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0e7a786376626d6e6e666a6a66777103636f6d00|" ALGO name bm TO 65535 ICASE
logdrop_dns  all  --  anywhere             anywhere             STRING match  "|0a65756d6d6167766e627003636f6d00|" ALGO name bm TO 65535 ICASE

Chain OUTPUT_IP (1 references)
target     prot opt source               destination
logdrop_ip  all  --  anywhere             193.201.224.0/24

Chain PControls (0 references)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere

Chain PTCSRVLAN (0 references)
target     prot opt source               destination

Chain PTCSRVWAN (0 references)
target     prot opt source               destination

Chain SECURITY (0 references)
target     prot opt source               destination
RETURN     tcp  --  anywhere             anywhere             tcpflags: FIN,SYN,RST,ACK/SYN limit: avg 1/sec burst 5
DROP       tcp  --  anywhere             anywhere             tcpflags: FIN,SYN,RST,ACK/SYN
RETURN     tcp  --  anywhere             anywhere             tcpflags: FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5
DROP       tcp  --  anywhere             anywhere             tcpflags: FIN,SYN,RST,ACK/RST
RETURN     icmp --  anywhere             anywhere             icmp echo-request limit: avg 1/sec burst 5
DROP       icmp --  anywhere             anywhere             icmp echo-request
RETURN     all  --  anywhere             anywhere

Chain default_block (0 references)
target     prot opt source               destination

Chain logaccept (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             state NEW LOG level warning tcp-sequence tcp-options ip-options prefix "ACCEPT "
ACCEPT     all  --  anywhere             anywhere

Chain logdrop (0 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             state NEW LOG level warning tcp-sequence tcp-options ip-options prefix "DROP "
DROP       all  --  anywhere             anywhere

Chain logdrop_dns (16 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             LOG level warning tcp-sequence tcp-options ip-options prefix "DROP_DNS "
DROP       all  --  anywhere             anywhere

Chain logdrop_ip (1 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere             LOG level warning tcp-sequence tcp-options ip-options prefix "DROP_IP "
DROP       all  --  anywhere             anywhere
admin@RT-AX58U-FAC0:/tmp/home/root#