# Generated by iptables-save v1.2.11 on Thu Sep 21 10:06:57 2006 *nat :PREROUTING ACCEPT [334:18192] :POSTROUTING ACCEPT [336:22366] :OUTPUT ACCEPT [336:22366] -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 COMMIT # Completed on Thu Sep 21 10:06:57 2006 # Generated by iptables-save v1.2.11 on Thu Sep 21 10:06:57 2006 *filter :INPUT ACCEPT [31:20633] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [1047:80453] -A INPUT -i eth1 -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 3128 -j ACCEPT -A INPUT -i eth0 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A INPUT -i eth1 -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 3128 -j ACCEPT -A INPUT -i eth0 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A INPUT -i eth0 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A INPUT -s 192.168.3.0/255.255.255.0 -i eth1 -j ACCEPT -A INPUT -i eth1 -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 3128 -j ACCEPT -A INPUT -i eth0 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p udp -m multiport --dports 137,138 -j ACCEPT -A INPUT -p tcp -m multiport --dports 139,445 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 3128 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 42 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 53 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 67 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 67 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 68 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 68 -j ACCEPT -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth1 -p tcp -m tcp --dport 20 -j ACCEPT -A FORWARD -i eth1 -p tcp -m tcp --dport 21 -j ACCEPT -A FORWARD -i eth1 -p udp -m udp --dport 20 -j ACCEPT -A FORWARD -i eth1 -p udp -m udp --dport 21 -j ACCEPT -A FORWARD -i eth0 -p tcp -m tcp --dport 20 -j ACCEPT -A FORWARD -i eth0 -p tcp -m tcp --dport 21 -j ACCEPT -A FORWARD -i eth0 -p udp -m udp --dport 21 -j ACCEPT -A FORWARD -i eth0 -p udp -m udp --dport 20 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 80 -j ACCEPT -A OUTPUT -o eth1 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A OUTPUT -o eth1 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT -A OUTPUT -d 192.168.3.0/255.255.255.0 -o eth1 -j ACCEPT -A OUTPUT -o eth0 -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 80 -j ACCEPT -A OUTPUT -o eth1 -p tcp -m state --state RELATED,ESTABLISHED -m tcp --sport 80 -j ACCEPT COMMIT # Completed on Thu Sep 21 10:06:57 2006