#!/bin/sh


# Set the default Policies to DENY
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

# Allow outgoing connections to other web servers
#ipchains -A output -i eth0 -p tcp --source-port 1024: -d 0.0.0.0 80 -j ACCEPT
#ipchains -A output -i eth0 -p tcp --source-port 1024: -d 0.0.0.0 443 -j ACCEPT


iptables -t nat -A PREROUTING -i eth0 -p tcp  -j DNAT   --to 192.168.10.20
iptables        -A FORWARD    -i eth0 -p tcp  -j ACCEPT  -d 192.168.10.20
iptables        -A FORWARD    -i eth1 -j ACCEPT
iptables        -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT



iptables -t nat -A PREROUTING -p tcp -d 66.225.184.82 --dport 80 -j DNAT --to-destination 192.168.10.250



iptables -A forward -i eth0 -s 192.168.10.20 -j MASQ