iptables - policy

[kilburn]

The iptables rules in ISPCP_{INPUT,OUTPUT} chains are used only to count traffic, but do not ACCEPT or DROP/REJECT any package.

Thus, there's no firewall enabled by default, but if you want to modify the script so traffic is accepted/rejected after counting it's up to you