#!/bin/bash
iptables -F
iptables -X

iptables -t mangle -F
iptables -t mangle -X

iptables -t nat -F
iptables -t nat -X

iptables -N dom0
iptables -A dom0 -j ACCEPT

iptables -N node1
iptables -A node1 -j ACCEPT

# ez azert kell, mert kulonben be se tudna jonni?!?!
iptables -P INPUT DROP
iptables -A INPUT -d 10.1.1.253 -j ACCEPT
iptables -A INPUT -d 10.1.1.100 -j ACCEPT

iptables -P FORWARD DROP
iptables -A FORWARD -d 10.1.1.253 -j dom0
iptables -A FORWARD -d 10.1.1.100 -j node1

iptables -A FORWARD -s 10.1.1.100 -m state --state ESTABLISHED,RELATED -j node1
iptables -A FORWARD -s 10.1.1.253 -m state --state ESTABLISHED,RELATED -j dom0

# ez meg azert, mert nem is tudna kimenni?!?!?
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P OUTPUT DROP

#echo 1 > /proc/sys/net/ipv4/ip_forward