Listing 4. The Filter Table's FORWARD and OUTPUT Chains

iptables -P FORWARD DROP
iptables -A FORWARD -j LOG \
  --log-prefix "FORWARD DROP: "
iptables -A FORWARD -j DROP

iptables -P OUTPUT ACCEPT