$IPTABLES -P INPUT DROP
$IPTABLES -F INPUT
$IPTABLES -P OUTPUT ACCEPT
$IPTABLES -F OUTPUT
$IPTABLES -P FORWARD DROP
$IPTABLES -F FORWARD
$IPTABLES -t nat -F

echo " INPUT ayarlari "
$IPTABLES -A INPUT -p tcp --dport 1723 -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 22 -j ACCEPT
$IPTABLES -A INPUT -d 213.139.196.50 -p tcp -m tcp --dport 21 -j ACCEPT
$IPTABLES -A INPUT -i eth1 -j ACCEPT
$IPTABLES -A INPUT -i lo -j ACCEPT

echo "   FWD: Allow all connections OUT and only existing and related ones IN"
$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $EXT2IF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT
$IPTABLES -A FORWARD -i $INTIF -o $EXT2IF -j ACCEPT
$IPTABLES -A FORWARD -j LOG

$IPTABLES -A OUTPUT -p ALL -s 127.0.0.1 -j ACCEPT
echo "   Enabling SNAT (MASQUERADE) functionality on $EXTIF"
$IPTABLES -A POSTROUTING -t nat -s 10.0.1.0/24 -o $EXTIF -j SNAT --to-source 81.215.105.147
$IPTABLES -A POSTROUTING -t nat -s 10.0.1.0/24 -o $EXT2IF -j SNAT --to-source 213.139.196.50
#$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE
#$IPTABLES -t nat -A POSTROUTING -o $EXT2IF -j MASQUERADE

echo " SBS e HTTP portu yonlendirmesi yapildi"
$IPTABLES -t nat -A PREROUTING -p tcp -i ppp0 --dport 80 -j DNAT --to 10.0.1.5
$IPTABLES -A FORWARD -p TCP -i ppp0 -o eth1 -d 10.0.1.5 --dport 80 -j ACCEPT
$IPTABLES -t nat -A PREROUTING -p tcp -i ppp0 --dport 3389 -j DNAT --to 10.0.1.34
$IPTABLES -A FORWARD -p TCP -i ppp0 -o eth1 -d 10.0.1.34 --dport 3389 -j ACCEPT
$IPTABLES -t nat -A PREROUTING -p tcp -i ppp0 --dport 5555 -j DNAT --to 10.0.1.5
$IPTABLES -A FORWARD -p TCP -i ppp0 -o eth1 -d 10.0.1.5 --dport 5555 -j ACCEPT
echo -e "\nrc.firewall-iptables v$FWVER done.\n"