root@lee-desktop:/home/lee# iptables-save # Generated by iptables-save v1.3.5 on Wed Mar 14 00:12:29 2007 *mangle :PREROUTING ACCEPT [8057897:3462622768] :INPUT ACCEPT [11070119:4529759573] :FORWARD ACCEPT [2421:148680] :OUTPUT ACCEPT [8035002:496632239] :POSTROUTING ACCEPT [11039779:682780339] COMMIT # Completed on Wed Mar 14 00:12:29 2007 # Generated by iptables-save v1.3.5 on Wed Mar 14 00:12:29 2007 *filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j LOG -A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP -A INPUT -d 255.255.255.255 -i ra0 -j ACCEPT -A INPUT -s 10.0.0.0/255.0.0.0 -i ra0 -j ACCEPT -A INPUT -d 224.0.0.0/240.0.0.0 -i ra0 -p ! tcp -j ACCEPT -A INPUT -s 10.0.0.0/255.0.0.0 -i eth0 -j LOG -A INPUT -s 10.0.0.0/255.0.0.0 -i eth0 -j DROP -A INPUT -s 10.0.0.0/255.0.0.0 -i ppp0 -j LOG -A INPUT -s 10.0.0.0/255.0.0.0 -i ppp0 -j DROP -A INPUT -d 255.255.255.255 -i eth0 -j ACCEPT -A INPUT -d 255.255.255.255 -i ppp0 -j ACCEPT -A INPUT -d 192.168.144.2 -i eth0 -j ACCEPT -A INPUT -d 192.168.144.255 -i eth0 -j ACCEPT -A INPUT -d 89.172.142.2 -i ppp0 -j ACCEPT -A INPUT -d 224.0.0.1 -j DROP -A INPUT -j LOG -A INPUT -j DROP -A FORWARD -s 10.0.0.0/255.0.0.0 -i ra0 -o eth0 -j ACCEPT -A FORWARD -s 10.0.0.0/255.0.0.0 -i ra0 -o ppp0 -j ACCEPT -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -d 10.0.0.0/255.0.0.0 -o eth0 -j LOG -A FORWARD -d 10.0.0.0/255.0.0.0 -o eth0 -j DROP -A FORWARD -d 10.0.0.0/255.0.0.0 -o ppp0 -j LOG -A FORWARD -d 10.0.0.0/255.0.0.0 -o ppp0 -j DROP -A FORWARD -d 224.0.0.1 -j DROP -A FORWARD -j LOG -A FORWARD -j DROP -A OUTPUT -o lo -j ACCEPT -A OUTPUT -d 255.255.255.255 -o ra0 -j ACCEPT -A OUTPUT -d 10.0.0.0/255.0.0.0 -o ra0 -j ACCEPT -A OUTPUT -d 224.0.0.0/240.0.0.0 -o ra0 -p ! tcp -j ACCEPT -A OUTPUT -d 10.0.0.0/255.0.0.0 -o eth0 -j LOG -A OUTPUT -d 10.0.0.0/255.0.0.0 -o eth0 -j DROP -A OUTPUT -d 10.0.0.0/255.0.0.0 -o ppp0 -j LOG -A OUTPUT -d 10.0.0.0/255.0.0.0 -o ppp0 -j DROP -A OUTPUT -d 255.255.255.255 -o eth0 -j ACCEPT -A OUTPUT -d 255.255.255.255 -o ppp0 -j ACCEPT -A OUTPUT -s 192.168.144.2 -o eth0 -j ACCEPT -A OUTPUT -s 192.168.144.255 -o eth0 -j ACCEPT -A OUTPUT -s 89.172.142.2 -o ppp0 -j ACCEPT -A OUTPUT -d 224.0.0.1 -j DROP -A OUTPUT -j LOG -A OUTPUT -j DROP COMMIT # Completed on Wed Mar 14 00:12:29 2007 # Generated by iptables-save v1.3.5 on Wed Mar 14 00:12:29 2007 *nat :PREROUTING ACCEPT [1672:110976] :POSTROUTING ACCEPT [125:9619] :OUTPUT ACCEPT [130:9922] -A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth0 -j MASQUERADE -A POSTROUTING -s 10.0.0.0/255.0.0.0 -o ppp0 -j MASQUERADE -A POSTROUTING -o eth1 -j MASQUERADE -A POSTROUTING -o eth1 -j MASQUERADE -A POSTROUTING -o ppp0 -j MASQUERADE COMMIT # Completed on Wed Mar 14 00:12:29 2007