iptables -L -n -v --line-numbers
Chain INPUT (policy ACCEPT 710M packets, 596G bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1     710M  596G KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain FORWARD (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 SUBMARINER-FWD-MSSCLAMP  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
2        0     0 SUBMARINER-FORWARD  0    --  *      *       0.0.0.0/0            0.0.0.0/0           
3        0     0 ACCEPT     0    --  *      *       0.0.0.0/0            169.254.0.1         
4        0     0 ACCEPT     0    --  *      *       169.254.0.1          0.0.0.0/0           
5        0     0 ACCEPT     0    --  *      *       0.0.0.0/0            172.30.0.0/16       
6        0     0 ACCEPT     0    --  *      *       172.30.0.0/16        0.0.0.0/0           
7        0     0 ACCEPT     0    --  *      *       0.0.0.0/0            10.254.0.0/16       
8        0     0 ACCEPT     0    --  *      *       10.254.0.0/16        0.0.0.0/0           
9        0     0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
10       0     0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT 711M packets, 642G bytes)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
2        0     0 REJECT     6    --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
3     711M  642G KUBE-FIREWALL  0    --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain KUBE-FIREWALL (2 references)
num   pkts bytes target     prot opt in     out     source               destination         
1        0     0 DROP       0    --  *      *      !127.0.0.0/8          127.0.0.0/8          /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT

Chain KUBE-KUBELET-CANARY (0 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SUBMARINER-FORWARD (1 references)
num   pkts bytes target     prot opt in     out     source               destination         

Chain SUBMARINER-FWD-MSSCLAMP (1 references)
num   pkts bytes target     prot opt in     out     source               destination