root@lee-desktop:/home/lee# iptables-save
# Generated by iptables-save v1.3.5 on Wed Mar 14 00:20:35 2007
*mangle
:PREROUTING ACCEPT [170:57209]
:INPUT ACCEPT [163:44697]
:FORWARD ACCEPT [45:15942]
:OUTPUT ACCEPT [135:9590]
:POSTROUTING ACCEPT [246:31730]
COMMIT
# Completed on Wed Mar 14 00:20:35 2007
# Generated by iptables-save v1.3.5 on Wed Mar 14 00:20:35 2007
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i lo -j ACCEPT 
-A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j LOG 
-A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP 
-A INPUT -d 255.255.255.255 -i eth0 -j ACCEPT 
-A INPUT -s 192.168.144.0/255.255.255.0 -i eth0 -j ACCEPT 
-A INPUT -d 224.0.0.0/240.0.0.0 -i eth0 -p ! tcp -j ACCEPT 
-A INPUT -s 192.168.144.0/255.255.255.0 -i ppp0 -j LOG 
-A INPUT -s 192.168.144.0/255.255.255.0 -i ppp0 -j DROP 
-A INPUT -s 192.168.144.0/255.255.255.0 -i ra0 -j LOG 
-A INPUT -s 192.168.144.0/255.255.255.0 -i ra0 -j DROP 
-A INPUT -d 255.255.255.255 -i ppp0 -j ACCEPT 
-A INPUT -d 255.255.255.255 -i ra0 -j ACCEPT 
-A INPUT -d 83.131.29.71 -i ppp0 -j ACCEPT 
-A INPUT -d 10.7.11.92 -i ra0 -j ACCEPT 
-A INPUT -d 10.255.255.255 -i ra0 -j ACCEPT 
-A INPUT -d 224.0.0.1 -j DROP 
-A INPUT -j LOG 
-A INPUT -j DROP 
-A FORWARD -o ppp0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1400:1536 -j TCPMSS --clamp-mss-to-pmtu 
-A FORWARD -s 192.168.144.0/255.255.255.0 -i eth0 -o ppp0 -j ACCEPT 
-A FORWARD -s 192.168.144.0/255.255.255.0 -i eth0 -o ra0 -j ACCEPT 
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A FORWARD -d 192.168.144.0/255.255.255.0 -o ppp0 -j LOG 
-A FORWARD -d 192.168.144.0/255.255.255.0 -o ppp0 -j DROP 
-A FORWARD -d 192.168.144.0/255.255.255.0 -o ra0 -j LOG 
-A FORWARD -d 192.168.144.0/255.255.255.0 -o ra0 -j DROP 
-A FORWARD -d 224.0.0.1 -j DROP 
-A FORWARD -j LOG 
-A FORWARD -j DROP 
-A OUTPUT -o lo -j ACCEPT 
-A OUTPUT -d 255.255.255.255 -o eth0 -j ACCEPT 
-A OUTPUT -d 192.168.144.0/255.255.255.0 -o eth0 -j ACCEPT 
-A OUTPUT -d 224.0.0.0/240.0.0.0 -o eth0 -p ! tcp -j ACCEPT 
-A OUTPUT -d 192.168.144.0/255.255.255.0 -o ppp0 -j LOG 
-A OUTPUT -d 192.168.144.0/255.255.255.0 -o ppp0 -j DROP 
-A OUTPUT -d 192.168.144.0/255.255.255.0 -o ra0 -j LOG 
-A OUTPUT -d 192.168.144.0/255.255.255.0 -o ra0 -j DROP 
-A OUTPUT -d 255.255.255.255 -o ppp0 -j ACCEPT 
-A OUTPUT -d 255.255.255.255 -o ra0 -j ACCEPT 
-A OUTPUT -s 83.131.29.71 -o ppp0 -j ACCEPT 
-A OUTPUT -s 10.7.11.92 -o ra0 -j ACCEPT 
-A OUTPUT -s 10.255.255.255 -o ra0 -j ACCEPT 
-A OUTPUT -d 224.0.0.1 -j DROP 
-A OUTPUT -j LOG 
-A OUTPUT -j DROP 
COMMIT
# Completed on Wed Mar 14 00:20:35 2007
# Generated by iptables-save v1.3.5 on Wed Mar 14 00:20:35 2007
*nat
:PREROUTING ACCEPT [42:4251]
:POSTROUTING ACCEPT [11:788]
:OUTPUT ACCEPT [11:788]
-A POSTROUTING -s 192.168.144.0/255.255.255.0 -o ppp0 -j MASQUERADE 
-A POSTROUTING -s 192.168.144.0/255.255.255.0 -o ra0 -j MASQUERADE 
COMMIT
# Completed on Wed Mar 14 00:20:35 2007