# Generated by iptables-save v1.2.11 on Tue Mar 7 12:59:38 2006 *filter :INPUT ACCEPT [1091409:291700112] :FORWARD ACCEPT [64:4536] :OUTPUT ACCEPT [991531:236748260] :valid-dst - [0:0] :valid-src - [0:0] -A INPUT -i 64.6.34.22 -j valid-src -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT -A FORWARD -d 10.10.15.192 -i eth0 -o eth1 -p tcp -m tcp --sport 1024:65535 --dport 81 -m state --state NEW -j ACCEPT -A FORWARD -d 10.10.15.192 -i eth0 -o eth1 -p tcp -m tcp --dport 2222 -m state --state NEW -j ACCEPT -A FORWARD -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i 64.6.34.22 -j valid-src -A FORWARD -o 64.6.34.22 -j valid-dst -A OUTPUT -o 64.6.34.22 -j valid-dst -A valid-dst -d 16.0.0.0/240.0.0.0 -j DROP -A valid-src -s 0.0.0.0/255.0.0.0 -j DROP -A valid-src -s 72.16.0.0/255.240.0.0 -j DROP -A valid-src -s 92.168.0.0/255.255.0.0 -j DROP -A valid-src -s 16.0.0.0/240.0.0.0 -j DROP -A valid-src -s 40.0.0.0/248.0.0.0 -j DROP -A valid-src -s 27.0.0.0/255.0.0.0 -j DROP -A valid-src -s 0.0.0.0/255.0.0.0 -j DROP -A valid-src -d 255.255.255.255 -j DROP -A valid-src -s 169.254.0.0/255.255.0.0 -j DROP -A valid-src -s 64.6.34.22 -j DROP COMMIT # Completed on Tue Mar 7 12:59:38 2006 # Generated by iptables-save v1.2.11 on Tue Mar 7 12:59:38 2006 *nat :PREROUTING ACCEPT [180885:62162980] :POSTROUTING ACCEPT [41885:3074998] :OUTPUT ACCEPT [56262:4126051] -A PREROUTING -d 64.6.34.22 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 81 -j DNAT --to-destination 10.10.15.192:80 -A PREROUTING -d 64.6.34.22 -i eth0 -p tcp -m tcp --dport 2222 -j DNAT --to-destination 10.10.15.192:22 -A POSTROUTING -o eth0 -j SNAT --to-source 64.6.34.22 COMMIT