Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- vps.publicip.org c-bef871d5.027-6-6b73641.cust.bredbandsbolaget.se tcp dpt:https ACCEPT tcp -- 10.10.10.0/24 213.113.248.190 tcp dpt:https ACCEPT tcp -- vps.publicip.org c-bef871d5.027-6-6b73641.cust.bredbandsbolaget.se tcp dpt:www ACCEPT tcp -- 10.10.10.0/24 213.113.248.190 tcp dpt:www Chain FORWARD (policy ACCEPT) target prot opt source destination NoCat all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- c-bef871d5.027-6-6b73641.cust.bredbandsbolaget.se vps.publicip.org ACCEPT tcp -- 213.113.248.190 10.10.10.0/24 ACCEPT tcp -- c-bef871d5.027-6-6b73641.cust.bredbandsbolaget.se vps.publicip.org ACCEPT tcp -- 213.113.248.190 10.10.10.0/24 Chain NoCat (1 references) target prot opt source destination NoCat_Ports all -- anywhere anywhere NoCat_Inbound all -- anywhere anywhere #!/bin/sh # PUB=`host 'ssl.publicip.net' | cut -d: -f2 | awk '{ print $3}'` IP=`ifconfig eth0 | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk '{ print $1}'` echo "10.10.10.1" "$IP" "server.dyndns.org" >> /etc/hosts /usr/local/sbin/iptables -I INPUT -p tcp -d 10.10.10.1 --dport 80 -i eth1 -s 10.10.10.0/24 -j ACCEPT /usr/local/sbin/iptables -I INPUT -p tcp -d $IP --dport 80 -i eth0 -s $PUB -j ACCEPT /usr/local/sbin/iptables -I INPUT -p tcp -d 10.10.10.1 --dport 443 -i eth1 -s 10.10.10.0/24 -j ACCEPT /usr/local/sbin/iptables -I INPUT -p tcp -d $IP --dport 443 -i eth0 -s $PUB -j ACCEPT /usr/local/sbin/iptables -I OUTPUT -p tcp -d 10.10.10.0/24 -s 10.10.10.1 -j ACCEPT /usr/local/sbin/iptables -I OUTPUT -p tcp -d $PUB -s $IP -j ACCEPT /usr/local/sbin/iptables -I OUTPUT -p tcp -d 10.10.10.0/24 -s 10.10.10.1 -j ACCEPT /usr/local/sbin/iptables -I OUTPUT -p tcp -d $PUB -s $IP -j ACCEPT