Ipforward and nat

Android4.0 iptables for tether:

02-01 15:54:37.071 E/NatController( 100): ----cmd= iptables -P INPUT ACCEPT

02-01 15:54:37.409 E/NatController( 100): ----cmd= iptables -P OUTPUT ACCEPT

02-01 15:54:37.411 E/NatController( 100): ----cmd= iptables -P FORWARD DROP

02-01 15:54:37.414 E/NatController( 100): ----cmd= iptables -F FORWARD

02-01 15:54:37.416 E/NatController( 100): ----cmd= iptables -t nat -F

02-01 15:54:37.419 E/NatController( 100): ----cmd= iptables rule flush

02-01 15:54:37.659 E/NatController( 100): ----cmd= iptables -6 rule flush

02-01 15:54:37.663 E/NatController( 100): ----cmd= iptables rule add from all lookup default prio 32767

02-01 15:54:37.678 E/NatController( 100): ----cmd= iptables rule add from all lookup main prio 32766

02-01 15:54:37.681 E/NatController( 100): ----cmd= iptables -6 rule add from all lookup default prio 32767

02-01 15:54:37.684 E/NatController( 100): ----cmd= iptables -6 rule add from all lookup main prio 32766

02-01 15:54:37.687 E/NatController( 100): ----cmd= iptables route flush cache

02-01 15:55:47.964 E/NatController( 100): ----cmd= iptables -A FORWARD -i wlan0:0 -o rndis0 -m state --state ESTABLISHED,RELATED -j ACCEPT

02-01 15:55:47.982 E/NatController( 100): ----cmd= iptables -A FORWARD -i rndis0 -o wlan0:0 -m state --state INVALID -j DROP

02-01 15:55:47.988 E/NatController( 100): ----cmd= iptables -A FORWARD -i rndis0 -o wlan0:0 -j ACCEPT

02-01 15:55:47.992 E/NatController( 100): ----cmd= iptables -t nat -A POSTROUTING -o wlan0:0 -j MASQUERADE

---Android 4.0以前关注的：

iptables -A FORWARD -i wlan0:0 -o rndis0 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A FORWARD -i rndis0 -o wlan0:0 -j ACCEPT

iptables -t nat -A POSTROUTING -o wlan0:0 -j MASQUERADE

Note: change wlan0:0 to wlan0.