Hello,
I may find out the answer by myself, but may be useful to someone else...

I have an embedded router that runs openwrt.

I'd like to be able to read the firewall rules from iptables,
you can see all rules from iptables -nvL
How I can identify the rules for port forwarding or dmz? in particolar, I need to know the range of ports that are in port forwarding, or if all ports have been forwarded to dmz on the lan. I know this is wrong, but this is what I do:

DMZ for all ports:
iptables -nvL zone_dmz_forward | grep -e '*' | grep -v 'dpts:' | awk '{ print $9 }' | grep -v '0.0.0.0'

port ranges:
iptables -nvL | grep -e 'tcp dpts' | awk -F ':' '{ print $3":"$2 }' | sed 's/ //g'
iptables -nvL | grep -e 'tcp spts' | awk -F ':' '{ print $5":"$4 }' | sed 's/ //g'

single port:

iptables -nvL | grep 'tcp dpt:' | grep -e '*' -e 'ppp' | cut -d ':' -f 2


Thanks in advance

--
'The Magic Is In the Movement'

            ___    
          {~._.~}  
          _( Y )_          
         (:_~*~_:)        
          (_)---(_)
(_Marco_)---(_Savo_)  
___                    ___
\-_-/SW Engineer\-_-/