I found the Bug.

There was no rule for my chain <lan-in> and <lan-out>,
because i inserted the rule at the wrong place !
###########################################################
iptables -I lan-in 2 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
iptables -I lan-out 2 -s 0.0.0.0/0 -d 0.0.0.0/0 -j ACCEPT
###########################################################

It should be inserted at line 1.

Regards Markus

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html