# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth3 -j ACCEPT
-A INPUT -i eth2 -j ACCEPT
-A INPUT -i tun0 -j ACCEPT
-A INPUT -m state -i eth0 --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p tcp -m tcp -m state -i eth0 --dport 22 --state NEW -j ACCEPT
-A INPUT -p tcp -m tcp -m state -i eth0 --dport 10000 --state NEW -j ACCEPT
-A INPUT -p udp -m udp -m state -i eth0 --dport 69 --state NEW -j ACCEPT
-A INPUT -p udp -m udp -i eth0 --dport 53 -j ACCEPT
-A INPUT -p udp -m udp -i eth0 --dport 1194 -j ACCEPT
-A FORWARD -i eth3 -j ACCEPT
-A FORWARD -i eth2 -j ACCEPT
-A FORWARD -i tun0 -j ACCEPT
-A FORWARD -m state -i eth0 --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -m icmp -i eth0 --icmp-type echo-request -j ACCEPT
-A INPUT -p icmp -m icmp -i eth0 --icmp-type echo-reply -j ACCEPT
COMMIT
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed