Hi my friend Keith Pettit :) # Generated by iptables-save v1.2.11 on Wed Jun 21 07:24:06 2006 *filter #:INPUT ACCEPT [102:7417] #:FORWARD ACCEPT [0:0] #:OUTPUT ACCEPT [79:7364] :INPUT DROP [1:242] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] :LOG_DROP - [0:0] :LOG_ACCEPT - [0:0] :icmp_packets - [0:0] #First, we cover the INPUT rules, or the rules for incoming requests. #Note how at the end we log any incoming packets that are not accepted. -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT #-A INPUT -p tcp -m tcp --dport 20 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 22 -j LOG_ACCEPT #-A INPUT -p tcp -m tcp --dport 25 -j LOG_ACCEPT #-A INPUT -p tcp -m tcp --dport 43 -j ACCEPT #-A INPUT -p tcp -m tcp --dport -j ACCEPT #-A INPUT -p udp -m udp --dport 53 -j ACCEPT #-A INPUT -p udp -m udp --dport 5060 -j ACCEPT #-A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT #-A INPUT -p udp -m udp --dport 4569 -j ACCEPT #-A INPUT -p udp -m udp --dport 5036 -j ACCEPT #-A INPUT -p udp -m udp --dport 5004 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 110 -j ACCEPT #uncomment the next line if you are running Spamassassin on your server #-A INPUT -p tcp -m tcp --dport 783 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 993 -j ACCEPT #-A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT #-A INPUT -s 127.0.0.1 -j ACCEPT #-A INPUT -p icmp -j icmp_packets #-A INPUT -j LOG_DROP #Next, we cover the OUTPUT rules, or the rules for all outgoing traffic. #Note how at the end we log any outbound packets that are not accepted. #-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 20 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 21 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 22 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 23 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 43 -j ACCEPT #-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 110 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 143 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT #uncomment the next line if you are running Spamassassin on your server #-A OUTPUT -p tcp -m tcp --dport 783 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 993 -j ACCEPT #-A OUTPUT -p tcp -m tcp --dport 3306 -j ACCEPT #-A OUTPUT -d 127.0.0.1 -j ACCEPT #-A OUTPUT -p icmp -j icmp_packets # FORWARD RULES -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -p tcp -m tcp --dport 20 -j ACCEPT -A FORWARD -p tcp -m tcp --dport 21 -j ACCEPT #Here we have 2 sets of logging rules. One for dropped packets to log all dropped requests and one for accepted packets, should we wish to log any accepted requesets. -A LOG_DROP -j LOG --log-prefix "[IPTABLES DROP] : " --log-tcp-options --log-ip-options -A LOG_DROP -j DROP -A OUTPUT -j LOG_DROP COMMIT # Completed on Wed Jun 31 11:24:06 2006 iptables -t nat -A POSTROUTING -o $DIALUP_IF -j MASQUERADE iptables -t nat -A POSTROUTING -o $DIALUP_IF -j SNAT --to-source $STATIC_IP