# ------- sluzby povolene pre eth0 -------
        iptables -A INPUT -i $ynet -p udp --sport 67:68 --dport 67:68 -j ACCEPT                 # dhcp
        iptables -A INPUT -p TCP --destination-port 389 -j ACCEPT # LDAP vantova poziadavka
        # 1


#       iptables -A INPUT -p TCP --destination-port 80 -j ACCEPT        # http - voyager
#       iptables -A INPUT -p TCP --destination-port 443 -j ACCEPT       # https - voyager
#       iptables -A INPUT -p TCP --destination-port 6667 -j ACCEPT # irc - voyager
        iptables -A INPUT -s horus.ynet.sk -p udp --dport 161 -j ACCEPT         # SNMP pre nagios na horusovi
#       iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 21 -j ACCEPT  # ftp koli cstrike
        iptables -A INPUT -p ICMP -j ACCEPT     # Povoli dnu ICMP pakety
        iptables -A INPUT -i $ynet -j ALLOWED
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 636 -j ACCEPT # LDAPs
        iptables -A INPUT -i $ynet -s horus.ynet.sk -m state --state NEW -p TCP --destination-port 389 -j ACCEPT # LDAP
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 22 -j ACCEPT  # ssh
#       iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 21 -j ACCEPT  # ftp
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9101 -j ACCEPT        # bacula Dir
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9102 -j ACCEPT        # bacula FD
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9103 -j ACCEPT        # bacula SD
        iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 3632 -j ACCEPT        # distcc

        #2
        iptables -A INPUT -j REJECT --reject-with icmp-port-unreachable