Something in the stack should check whether kernel has iptables support, otherwise it just silently fails :) Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert INPUT --in-interface wlan1 --protocol tcp --destination-port 53 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert INPUT --in-interface wlan1 --protocol udp --destination-port 53 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert INPUT --in-interface wlan1 --protocol tcp --destination-port 67 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert INPUT --in-interface wlan1 --protocol udp --destination-port 67 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert FORWARD --in-interface wlan1 --jump REJECT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert FORWARD --out-interface wlan1 --jump REJECT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert FORWARD --in-interface wlan1 --out-interface wlan1 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert FORWARD --source 10.42.43.0/255.255.255.0 --in-interface wlan1 --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table filter --insert FORWARD --destination 10.42.43.0/255.255.255.0 --out-interface wlan1 --match state --state ESTABLISHED,RELATED --jump ACCEPT Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3. Apr 23 08:00:39 chi NetworkManager: <info> Executing: /sbin/iptables --table nat --insert POSTROUTING --source 10.42.43.0/255.255.255.0 --destination ! 10.42.43.0/255.255.255.0 --jump MASQUERADE Apr 23 08:00:39 chi NetworkManager: <info> ** Command returned exit status 3.