# Generated by iptables-save v1.3.8 on Thu Sep 23 23:10:59 2010
*nat
:PREROUTING ACCEPT [3694630:348257946]
:POSTROUTING ACCEPT [771409:60449605]
:OUTPUT ACCEPT [212907:16145110]
:VSERVER - [0:0]
-A PREROUTING -d 95.29.1.91 -j VSERVER
-A PREROUTING -d 10.26.40.90 -j VSERVER
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -o br0 -j SNAT --to-source 192.168.1.1
-A POSTROUTING -s ! 95.29.1.91 -o ppp0 -j SNAT --to-source 95.29.1.91
-A POSTROUTING -s ! 10.26.40.90 -o vlan1 -j SNAT --to-source 10.26.40.90
-A VSERVER -p tcp -m tcp --dport 6881 -j DNAT --to-destination 192.168.1.172:6881
-A VSERVER -p udp -m udp --dport 6881 -j DNAT --to-destination 192.168.1.172:6881
-A VSERVER -p tcp -m tcp --dport 9999 -j DNAT --to-destination 192.168.1.2:9999
-A VSERVER -p udp -m udp --dport 7059 -j DNAT --to-destination 192.168.1.2:7059
-A VSERVER -p tcp -m tcp --dport 7059 -j DNAT --to-destination 192.168.1.2:7059
-A VSERVER -p tcp -m tcp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3031 -j DNAT --to-destination 192.168.1.2:3031
-A VSERVER -p udp -m udp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3031 -j DNAT --to-destination 192.168.1.2:3031
-A VSERVER -p udp -m udp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3031 -j DNAT --to-destination 192.168.1.2:3031
-A VSERVER -p udp -m udp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3031 -j DNAT --to-destination 192.168.1.2:3031
-A VSERVER -p udp -m udp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p udp -m udp --dport 4444 -j DNAT --to-destination 192.168.1.2:4444
-A VSERVER -p tcp -m tcp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 3031 -j DNAT --to-destination 192.168.1.2:3031
-A VSERVER -p udp -m udp --dport 3030 -j DNAT --to-destination 192.168.1.2:3030
-A VSERVER -p tcp -m tcp --dport 28563 -j DNAT --to-destination 192.168.1.2:28563
-A VSERVER -p tcp -m tcp --dport 25565 -j DNAT --to-destination 192.168.1.2:25565
-A VSERVER -p udp -m udp --dport 28564 -j DNAT --to-destination 192.168.1.2:28564
-A VSERVER -p tcp -m tcp --dport 3000 -j DNAT --to-destination 192.168.1.2:3000
-A VSERVER -p tcp -m tcp --dport 3001 -j DNAT --to-destination 192.168.1.2:3001
-A VSERVER -p udp -m udp --dport 3000 -j DNAT --to-destination 192.168.1.2:3000
-A VSERVER -p tcp -m tcp --dport 3000 -j DNAT --to-destination 192.168.1.2:3000
-A VSERVER -p tcp -m tcp --dport 35505:35509 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p udp -m udp --dport 35505:35509 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p tcp -m tcp --dport 9176 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p udp -m udp --dport 9176 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p tcp -m tcp --dport 19176 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.2:80
-A VSERVER -p udp -m udp --dport 80 -j DNAT --to-destination 192.168.1.2:80
-A VSERVER -p tcp -m tcp --dport 443 -j DNAT --to-destination 192.168.1.2:443
-A VSERVER -p udp -m udp --dport 443 -j DNAT --to-destination 192.168.1.2:443
-A VSERVER -p tcp -m tcp --dport 25600:25616 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p udp -m udp --dport 25600:25616 -j DNAT --to-destination 192.168.1.2
-A VSERVER -p udp -m udp --dport 8642 -j DNAT --to-destination 192.168.1.4:8642
-A VSERVER -p tcp -m tcp --dport 8642 -j DNAT --to-destination 192.168.1.4:8642
-A VSERVER -p udp -m udp --dport 46669 -j DNAT --to-destination 192.168.1.2:46669
-A VSERVER -p tcp -m tcp --dport 46669 -j DNAT --to-destination 192.168.1.2:46669
COMMIT
# Completed on Thu Sep 23 23:10:59 2010
# Generated by iptables-save v1.3.8 on Thu Sep 23 23:10:59 2010
*mangle
:PREROUTING ACCEPT [76347547:40607239450]
:INPUT ACCEPT [27220194:13033774253]
:FORWARD ACCEPT [48151543:27491606425]
:OUTPUT ACCEPT [31863957:20906569086]
:POSTROUTING ACCEPT [80122816:48439466522]
COMMIT
# Completed on Thu Sep 23 23:10:59 2010
# Generated by iptables-save v1.3.8 on Thu Sep 23 23:10:59 2010
*filter
:INPUT ACCEPT [700524:79412932]
:FORWARD ACCEPT [2438980:223973183]
:OUTPUT ACCEPT [31855512:20905569000]
:BRUTE - [0:0]
:MACS - [0:0]
:SECURITY - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
-A INPUT -m state --state INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -d 224.0.0.0/240.0.0.0 -p igmp -j ACCEPT
-A INPUT -d 224.0.0.0/240.0.0.0 -p udp -m udp ! --dport 1900 -j ACCEPT
-A FORWARD -d 192.168.1.2 -p tcp -m tcp --dport 46669 -j ACCEPT
-A FORWARD -d 192.168.1.2 -p udp -m udp --dport 46669 -j ACCEPT
-A FORWARD -d 192.168.1.4 -p tcp -m tcp --dport 8642 -j ACCEPT
-A FORWARD -d 192.168.1.4 -p udp -m udp --dport 8642 -j ACCEPT
-A FORWARD -p tcp -m webstr --url vkontakte -j REJECT --reject-with tcp-reset
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ! br0 -o ppp0 -j DROP
-A FORWARD -i ! br0 -o vlan1 -j DROP
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A FORWARD -o br0 -j DROP
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN
-A SECURITY -p udp -m limit --limit 5/sec -j RETURN
-A SECURITY -p icmp -m limit --limit 5/sec -j RETURN
-A SECURITY -p ipv6 -j RETURN
-A SECURITY -j DROP
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logdrop -j DROP
COMMIT
# Completed on Thu Sep 23 23:10:59 2010