# (1) Policies (default)
iptables -F INPUT
iptables -F OUTPUT
iptables -F FORWARD
iptables -t nat -F

iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

# (2) User-defined chain for ACCEPTed TCP packets
#iptables -N okay
#iptables -A okay -p TCP --syn -j ACCEPT
#iptables -A okay -p TCP -m state --state ESTABLISHED,RELATED -j ACCEPT
#iptables -A okay -p TCP -j DROP

# (3) INPUT chain rules
# Rules for incoming packets from LAN
iptables -A INPUT -p ALL -i eth2 -s 192.168.148.0/24 -j ACCEPT
iptables -A INPUT -p ALL -i eth2 -s 192.168.148.255 -j ACCEPT
iptables -A INPUT -p ALL -i eth2 -s 89.212.77.229 -j ACCEPT
iptables -A INPUT -p ALL -i lo -s 127.0.0.1 -j ACCEPT

# Packets for established connections
#iptables -A INPUT -p ALL -d 192.168.2.6 -m state --state ESTABLISHED,RELATED -j ACCEPT

# (4) Rules for incoming packets from the Internet

#TCP
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 21 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 2222 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 25 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 53 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 953 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 80 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 143 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 110 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 192.168.0.0/16 --dport 3306 -j ACCEPT
iptables -A INPUT -p TCP -i eth2 -s 0/0 --dport 30000:30100 -j ACCEPT

#UDP
iptables -A INPUT -p UDP -i eth2 -s 0/0 --dport 53 -j ACCEPT
iptables -A INPUT -p UDP -i eth2 -s 0/0 --dport 32768 -j ACCEPT

#ICMP rules
iptables -A INPUT -p ICMP -i eth2 -s 0/0 --icmp-type 11 -j ACCEPT