$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet 127.0.0.2/8 brd 127.255.255.255 scope host secondary lo
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:12:3f:fb:25:dc brd ff:ff:ff:ff:ff:ff
    inet 192.168.60.84/24 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:0c:f1:22:a6:49 brd ff:ff:ff:ff:ff:ff
    inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1
$ ip r l
10.0.0.0/24 dev eth1  proto kernel  scope link  src 10.0.0.1 
192.168.60.0/24 dev eth0  proto kernel  scope link  src 192.168.60.84 
127.0.0.0/8 dev lo  scope link 
default via 10.0.0.138 dev eth1  proto static 
$ cat /media/disk/tmp/.backup/shara/config/myFW_template
#!/bin/bash

echo "starting myFW script"
echo
sleep 1

#Definujeme si rozhrani
INET_IP="10.0.0.1/24"
INET_IFACE="ath1"

LAN_IP="192.168.60.84/24"
LAN_SRC="192.168.60.0/24"
LAN_BCAST="192.168.0.255"
LAN_IFACE="eth0"

LO_IP="127.0.0.1"
LO_IFACE="lo"

#Zavedme moduly
modprobe ip_tables
modprobe ipt_REJECT
modprobe ipt_LOG
modprobe ipt_MASQUERADE
modprobe ip_nat_ftp
modprobe ip_nat_irc
modprobe ip_conntrack_ftp
modprobe ip_conntrack_irc

#Povolime forwarding
echo "1" >/proc/sys/net/ipv4/ip_forward

#Maly uklid..
iptables -F
iptables -t nat -F
iptables -X

#Zakladni chovani na nasi krizovatce
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

#Maskarada..
iptables -t nat -A POSTROUTING -o $INET_IFACE -s $LAN_SRC -j MASQUERADE

#Input/Output/Forward rules
iptables -A INPUT -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -A FORWARD -j ACCEPT