house openvpn # cat /var/lib/iptables/rules-save
# Generated by iptables-save v1.3.5 on Tue Aug  8 21:09:47 2006
*nat
:PREROUTING ACCEPT [1173976:265672549]
:POSTROUTING ACCEPT [4832:434132]
:OUTPUT ACCEPT [10022:717749]
:keep_state - [0:0]
[0:0] -A POSTROUTING -o eth1 -j MASQUERADE
[239331:13482064] -A POSTROUTING -o eth2 -j MASQUERADE
[0:0] -A keep_state -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A keep_state -j RETURN
COMMIT
# Completed on Tue Aug  8 21:09:47 2006
# Generated by iptables-save v1.3.5 on Tue Aug  8 21:09:47 2006
*mangle
:PREROUTING ACCEPT [80300027:51235500553]
:INPUT ACCEPT [2405164:712166554]
:FORWARD ACCEPT [77958198:50537121334]
:OUTPUT ACCEPT [1739453:277329733]
:POSTROUTING ACCEPT [79631822:50799348833]
COMMIT
# Completed on Tue Aug  8 21:09:47 2006
# Generated by iptables-save v1.3.5 on Tue Aug  8 21:09:47 2006
*filter
:INPUT ACCEPT [450083:242303569]
:FORWARD DROP [626:114975]
:OUTPUT ACCEPT [1098156:158763046]
:keep_state - [0:0]
[0:0] -A INPUT -i tap0 -j ACCEPT
[585:55445] -A INPUT -i br0 -j ACCEPT
[1181:104824] -A INPUT -i lo -j ACCEPT
[412177:33116306] -A INPUT -i br0 -j ACCEPT
[0:0] -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
[318865:30579980] -A INPUT -i eth2 -p tcp -m tcp --dport 22 -j ACCEPT
[1364:188928] -A FORWARD -i br0 -j ACCEPT
[25407312:9137776720] -A FORWARD -s 10.1.2.0/255.255.255.0 -i br0 -j ACCEPT
[0:0] -A FORWARD -d 10.1.2.0/255.255.255.0 -i eth1 -j ACCEPT
[28531720:23029396199] -A FORWARD -d 10.1.2.0/255.255.255.0 -i eth2 -j ACCEPT
[0:0] -A keep_state -m state --state RELATED,ESTABLISHED -j ACCEPT
[0:0] -A keep_state -j RETURN
COMMIT
# Completed on Tue Aug  8 21:09:47 2006