# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:02 2012
*nat
:PREROUTING ACCEPT [573218:40302716]
:POSTROUTING ACCEPT [928602:53023283]
:OUTPUT ACCEPT [931181:53253221]
-A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 
-A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 
-A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -j MASQUERADE 
COMMIT
# Completed on Thu Mar 29 16:41:02 2012
# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:02 2012
*filter
:INPUT ACCEPT [421342995:568979599367]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [328293296:819892001803]
-A INPUT -i vnet0 -j DROP 
-A FORWARD -i vnet0 -j DROP 
-A FORWARD -i vnet0 -j DROP 
-A FORWARD -d 192.168.122.0/24 -o vnet0 -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A FORWARD -s 192.168.122.0/24 -i vnet0 -j ACCEPT 
-A FORWARD -i vnet0 -o vnet0 -j ACCEPT 
-A FORWARD -o vnet0 -j REJECT --reject-with icmp-port-unreachable 
-A FORWARD -i vnet0 -j REJECT --reject-with icmp-port-unreachable 
COMMIT
# Completed on Thu Mar 29 16:41:02 2012