#!/bin/sh
/sbin/iptables -t filter -F
/sbin/iptables -t filter -X
/sbin/iptables -t filter -P INPUT DROP
/sbin/iptables -t filter -P FORWARD DROP
/sbin/iptables -t filter -P OUTPUT ACCEPT
/sbin/iptables -t filter -A INPUT -p TCP ! -i lo --dport 800 -j DROP
/sbin/iptables -t filter -A INPUT -p TCP ! -i lo --dport 8118 -j DROP
/sbin/iptables -t filter -A INPUT -p TCP ! -i lo --dport 9050 -j DROP
/sbin/iptables -t filter -A INPUT -p TCP ! -i lo --dport 8123 -j DROP
/sbin/iptables -t filter -A INPUT -p TCP ! -i lo --dport 8081 -j DROP
/sbin/iptables -t filter -A INPUT -p UDP -i red --dport 137 -s 0/0 -j DROP
/sbin/iptables -t filter -A INPUT -p UDP -i red --dport 138 -s 0/0 -j DROP
/sbin/iptables -t filter -A INPUT -p UDP -i orange --dport 137 -s 0/0 -j DROP
/sbin/iptables -t filter -A INPUT -p UDP -i orange --dport 138 -s 0/0 -j DROP
/sbin/iptables -t filter -N ipblock
/sbin/iptables -t filter -A INPUT -i red -j ipblock
/sbin/iptables -t filter -A FORWARD -i red -j ipblock
/sbin/iptables -t filter -N guardian
/sbin/iptables -t filter -A INPUT -i red -j guardian
/sbin/iptables -t filter -A FORWARD -i red -j guardian
/sbin/iptables -t filter -N advnet
/sbin/iptables -t filter -A INPUT -i red -j advnet
/sbin/iptables -t filter -N portfw
/sbin/iptables -t filter -A FORWARD  -j portfw
/sbin/iptables -t filter -A INPUT  -j portfw
/sbin/iptables -t filter -A INPUT -i lo -j ACCEPT
/sbin/iptables -t filter -A INPUT -i green -j ACCEPT
/sbin/iptables -t filter -A INPUT -i ppp0 -j ACCEPT
/sbin/iptables -t filter -N block
/sbin/iptables -t filter -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A block -i green -j ACCEPT
/sbin/iptables -t filter -A block -i ppp0 -j ACCEPT
/sbin/iptables -t filter -A block -i tun0 -j ACCEPT
/sbin/iptables -t filter -N xtaccess
/sbin/iptables -t filter -A block  -j xtaccess
/sbin/iptables -t filter -A block -p TCP --source-port 67 --destination-port 68 -i red -j ACCEPT
/sbin/iptables -t filter -A block -p TCP --source-port 68 --destination-port 67 -i red -j ACCEPT
/sbin/iptables -t filter -A block -p UDP --source-port 67 --destination-port 68 -i red -j ACCEPT
/sbin/iptables -t filter -A block -p UDP --source-port 68 --destination-port 67 -i red -j ACCEPT
/sbin/iptables -t filter -A block -i orange -p tcp --dport 16667 -j ACCEPT
/sbin/iptables -t filter -A INPUT  -j block
/sbin/iptables -t filter -A INPUT  -j LOG --log-prefix="INPUT: "
/sbin/iptables -t filter -A INPUT  -j REJECT
/sbin/iptables -t filter -A FORWARD -o red -m mac --mac-source 00:16:36:2F:9C:0C -j LOG
/sbin/iptables -t filter -A FORWARD -o red -m mac --mac-source 00:16:36:2F:9C:0C -j REJECT
/sbin/iptables -t filter -A FORWARD -m state --state ESTABLISHED,RELATED -o red -j ACCEPT
/sbin/iptables -t filter -A FORWARD -m state --state ESTABLISHED,RELATED -i red -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i green -o green -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i orange -o orange -j ACCEPT
/sbin/iptables -t filter -A FORWARD  -j portfw
/sbin/iptables -t filter -N dmzholes
/sbin/iptables -t filter -N wifiholes
/sbin/iptables -t filter -A FORWARD -i orange -o green -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i orange -o ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i orange -o tun0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i green -o orange -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i green -o ppp0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i green -o tun0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i ppp0 -o orange -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i ppp0 -o green -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i ppp0 -o tun0 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i tun0 -o orange -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i tun0 -o ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i tun0 -o green -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -i orange -o green -j dmzholes
/sbin/iptables -t filter -A FORWARD -i tun0 -o green -j wifiholes
/sbin/iptables -t filter -A FORWARD  -j LOG
/sbin/iptables -t filter -A FORWARD  -j REJECT
/sbin/iptables -t nat -F
/sbin/iptables -t nat -X
/sbin/iptables -t nat -N squid
/sbin/iptables -t nat -N jmpsquid
/sbin/iptables -t nat -A jmpsquid -d 10.0.0.0/8 -j RETURN
/sbin/iptables -t nat -A jmpsquid -d 172.16.0.0/12 -j RETURN
/sbin/iptables -t nat -A jmpsquid -d 192.168.0.0/16 -j RETURN
/sbin/iptables -t nat -A jmpsquid -s 192.168.2.160/27 -j RETURN
/sbin/iptables -t nat -A jmpsquid -d 169.254.0.0/16 -j RETURN
/sbin/iptables -t nat -A jmpsquid  -j squid
/sbin/iptables -t nat -A PREROUTING -i green -j jmpsquid
/sbin/iptables -t nat -A PREROUTING -i tun0 -j jmpsquid
/sbin/iptables -t nat -A squid -p TCP --dport 80 -j REDIRECT --to-ports 8080
/sbin/iptables -t nat -N imlog
/sbin/iptables -t nat -A imlog -d 10.0.0.0/8 -j RETURN
/sbin/iptables -t nat -A imlog -d 172.16.0.0/12 -j RETURN
/sbin/iptables -t nat -A imlog -d 192.168.0.0/16 -j RETURN
/sbin/iptables -t nat -A imlog -d 169.254.0.0/16 -j RETURN
/sbin/iptables -t nat -A PREROUTING -i orange -s 192.168.0.151 -j imlog
/sbin/iptables -t nat -A PREROUTING -i orange -s 192.168.0.152 -j imlog
/sbin/iptables -t nat -A POSTROUTING -o red -j MASQUERADE
/sbin/iptables -t nat -A POSTROUTING -o green -s 192.168.2.1/24 -j MASQUERADE
/sbin/iptables -t nat -A POSTROUTING -o orange -s 192.168.0.1/24 -j MASQUERADE
/sbin/iptables -t nat -N portfw_pre
/sbin/iptables -t nat -N portfw_post
/sbin/iptables -t nat -A PREROUTING  -j portfw_pre
/sbin/iptables -t nat -A POSTROUTING  -j portfw_post
/sbin/iptables -t filter -F dmzholes
/sbin/iptables -t filter -A dmzholes -m state --state NEW -p udp -s 192.168.0.153 -d 192.168.2.1 --dport 53 -j ACCEPT
/sbin/iptables -t filter -F wifiholes
/sbin/iptables -t filter -A wifiholes -m state --state NEW -p tcp -s 192.168.182.0/24 -d sheetz.g.c --dport 22 -j ACCEPT
/sbin/iptables -t filter -A wifiholes -m state --state NEW -p tcp -s 192.168.182.0/24 -d gali.g.c --dport 22 -j ACCEPT
/sbin/iptables -t filter -A wifiholes -m state --state NEW -p tcp -s 192.168.182.0/24 -d shuttle.g.c --dport 22 -j ACCEPT
/sbin/iptables -t filter -A wifiholes -m state --state NEW -p tcp -s 192.168.182.0/24 -d 192.168.2.144 --dport 5154 -j ACCEPT
/sbin/iptables -t filter -A wifiholes -m state --state NEW -p udp -s 192.168.182.0/24 -d 192.168.2.144 --dport 5154 -j ACCEPT
/sbin/iptables -t filter -F xtaccess
/sbin/iptables -t filter -A xtaccess -i red -p tcp -s 0.0.0.0/0 --destination-port 113 -j ACCEPT
/sbin/iptables -t filter -A xtaccess -i red -p 41 -s 0.0.0.0/0 -j ACCEPT
/sbin/iptables -t filter -A xtaccess -i red -p tcp -s 0.0.0.0/0 --destination-port 22 -j ACCEPT
/sbin/iptables -t filter -F advnet
/sbin/iptables -t filter -A advnet -p IGMP -j DROP
/sbin/iptables -t filter -F ipblock
/sbin/iptables -t filter -A ipblock -s 83.184.130.25 -j DROP
/sbin/iptables -t filter -A ipblock -s 62.75.193.116 -j DROP
/sbin/iptables -t filter -A ipblock -s 85.18.23.137 -j DROP
/sbin/iptables -t filter -A ipblock -s 69.36.3.48 -j DROP
/sbin/iptables -t filter -A ipblock -s 80.68.246.78 -j DROP
/sbin/iptables -t filter -A ipblock -s 68.178.232.99 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.188.39.28 -j DROP
/sbin/iptables -t filter -A ipblock -s 80.11.141.9 -j DROP
/sbin/iptables -t filter -A ipblock -s 218.200.216.58 -j DROP
/sbin/iptables -t filter -A ipblock -s 200.127.118.193 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.36.251.230 -j DROP
/sbin/iptables -t filter -A ipblock -s 24.13.112.2 -j DROP
/sbin/iptables -t filter -A ipblock -s 24.161.46.91 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.142.250.46 -j DROP
/sbin/iptables -t filter -A ipblock -s 59.37.66.7 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.144.60.2 -j DROP
/sbin/iptables -t filter -A ipblock -s 84.1.64.18 -j DROP
/sbin/iptables -t filter -A ipblock -s 207.96.235.186 -j DROP
/sbin/iptables -t filter -A ipblock -s 203.75.227.120 -j DROP
/sbin/iptables -t filter -A ipblock -s 38.118.212.78 -j DROP
/sbin/iptables -t filter -A ipblock -s 71.248.115.119 -j DROP
/sbin/iptables -t filter -A ipblock -s 212.116.128.10 -j DROP
/sbin/iptables -t filter -A ipblock -s 212.50.10.144 -j DROP
/sbin/iptables -t filter -A ipblock -s 219.145.107.162 -j DROP
/sbin/iptables -t filter -A ipblock -s 218.75.24.230 -j DROP
/sbin/iptables -t filter -A ipblock -s 80.96.109.231 -j DROP
/sbin/iptables -t filter -A ipblock -s 69.28.181.35 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.28.104.6 -j DROP
/sbin/iptables -t filter -A ipblock -s 195.230.0.60 -j DROP
/sbin/iptables -t filter -A ipblock -s 216.74.152.11 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.94.237.85 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.94.237.84 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.94.237.71 -j DROP
/sbin/iptables -t filter -A ipblock -s 66.94.237.73 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.150.108.21 -j DROP
/sbin/iptables -t filter -A ipblock -s 81.52.202.113 -j DROP
/sbin/iptables -t filter -A ipblock -s 81.52.250.97 -j DROP
/sbin/iptables -t filter -A ipblock -s 208.122.223.4 -j DROP
/sbin/iptables -t filter -A ipblock -s 63.111.69.15 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.136.205.158 -j DROP
/sbin/iptables -t filter -A ipblock -s 222.81.80.14 -j DROP
/sbin/iptables -t filter -A ipblock -s 216.90.171.3 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.178.180.226 -j DROP
/sbin/iptables -t filter -A ipblock -s 208.11.75.3 -j DROP
/sbin/iptables -t filter -A ipblock -s 62.153.203.202 -j DROP
/sbin/iptables -t filter -A ipblock -s 221.232.160.115 -j DROP
/sbin/iptables -t filter -A ipblock -s 82.147.153.162 -j DROP
/sbin/iptables -t filter -A ipblock -s 194.12.254.114 -j DROP
/sbin/iptables -t filter -A ipblock -s 222.218.156.5 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.153.13.53 -j DROP
/sbin/iptables -t filter -A ipblock -s 59.44.219.6 -j DROP
/sbin/iptables -t filter -A ipblock -s 219.153.2.168 -j DROP
/sbin/iptables -t filter -A ipblock -s 61.233.91.120 -j DROP
/sbin/iptables -t filter -F guardian
/sbin/iptables -t filter -A guardian -s 64.34.176.112 -j DROP
/sbin/iptables -t filter -F portfw
/sbin/iptables -t nat -F portfw_pre
/sbin/iptables -t nat -F portfw_post
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 6668 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6668 -j DNAT --to 192.168.0.102:6668
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 6688 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6688 -j DNAT --to 192.168.0.102:6688
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 7000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 7000 -j DNAT --to 192.168.0.102:7000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 7001 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 7001 -j DNAT --to 192.168.0.102:7001
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 7070 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 7070 -j DNAT --to 192.168.0.102:7070
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 7111 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 7111 -j DNAT --to 192.168.0.102:7111
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 10000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 10000 -j DNAT --to 192.168.0.102:10000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 20000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 20000 -j DNAT --to 192.168.0.102:20000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 25 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 25 -j DNAT --to 192.168.0.106:25
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 110 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 110 -j DNAT --to 192.168.0.106:110
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 143 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 143 -j DNAT --to 192.168.0.106:143
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 993 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 993 -j DNAT --to 192.168.0.106:993
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 106 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 106 -j DNAT --to 192.168.0.106:106
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 2222 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 2222 -j DNAT --to 192.168.0.106:2222
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 9200 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 9200 -j DNAT --to 192.168.0.106:9200
/sbin/iptables -t filter -A portfw -i red -o orange -p 17 -s 0.0.0.0/0 -d 192.168.0.106 --dport 3653 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3653 -j DNAT --to 192.168.0.106:3653
/sbin/iptables -t filter -A portfw -i red -o orange -p 17 -s 0.0.0.0/0 -d 192.168.0.106 --dport 4343 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 4343 -j DNAT --to 192.168.0.106:4343
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 6697 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6697 -j DNAT --to 192.168.0.102:6697
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 1512 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 1512 -j DNAT --to 192.168.0.106:1512
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.151 --dport 3306 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3306 -j DNAT --to 192.168.0.151:3306
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.151 --dport 2999 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 2999 -j DNAT --to 192.168.0.151:2999
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.152 --dport 22220:22230 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 22220:22230 -j DNAT --to 192.168.0.152
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.152 --dport 2528 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 2528 -j DNAT --to 192.168.0.152:2528
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.153 --dport 80 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 80 -j DNAT --to 192.168.0.153:80
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.153 --dport 443 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 443 -j DNAT --to 192.168.0.153:443
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.153 --dport 21 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 21 -j DNAT --to 192.168.0.153:21
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.153 --dport 53 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 53 -j DNAT --to 192.168.0.153:53
/sbin/iptables -t filter -A portfw -i red -o orange -p 17 -s 0.0.0.0/0 -d 192.168.0.153 --dport 53 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 53 -j DNAT --to 192.168.0.153:53
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 10001 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 10001 -j DNAT --to 192.168.0.106:10001
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 10002 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 10002 -j DNAT --to 192.168.0.106:10002
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 6667 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6667 -j DNAT --to 192.168.0.102:6667
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 22 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 22 -j DNAT --to 192.168.0.102:22
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 98 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 98 -j DNAT --to 192.168.0.102:98
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 3310 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3310 -j DNAT --to 192.168.0.102:3310
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 3337 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3337 -j DNAT --to 192.168.0.102:3337
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 3338 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3338 -j DNAT --to 192.168.0.102:3338
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.201 --dport 6881:6889 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6881:6889 -j DNAT --to 192.168.0.201
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.102 --dport 5000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5000 -j DNAT --to 192.168.0.102:5000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.100 --dport 8602 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 8602 -j DNAT --to 192.168.0.100:8602
/sbin/iptables -t filter -A portfw -i red -o orange -p 17 -s 0.0.0.0/0 -d 192.168.0.100 --dport 8602 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 8602 -j DNAT --to 192.168.0.100:8602
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.100 --dport 5900 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5900 -j DNAT --to 192.168.0.100:5900
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.100 --dport 5800 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5800 -j DNAT --to 192.168.0.100:5800
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.151 --dport 7566 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 7566 -j DNAT --to 192.168.0.151:7566
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.152 --dport 8000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 8000 -j DNAT --to 192.168.0.152:8000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.106 --dport 25 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 2525 -j DNAT --to 192.168.0.106:25
/sbin/iptables -t filter -A portfw -i red -o orange -p 17 -s 0.0.0.0/0 -d 192.168.0.100 --dport 30000 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 30000 -j DNAT --to 192.168.0.100:30000
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.151 --dport 2999 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 23 -j DNAT --to 192.168.0.151:2999
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 5154 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5154 -j DNAT --to 192.168.2.144:5154
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.144 --dport 5154 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5154 -j DNAT --to 192.168.2.144:5154
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 6346 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6346 -j DNAT --to 192.168.2.144:6346
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.144 --dport 6346 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 6346 -j DNAT --to 192.168.2.144:6346
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 26299 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 26299 -j DNAT --to 192.168.2.144:26299
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.144 --dport 26299 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 26299 -j DNAT --to 192.168.2.144:26299
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 22 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 2121 -j DNAT --to 192.168.2.144:22
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 16003 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 16003 -j DNAT --to 192.168.2.144:16003
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.144 --dport 16003 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 16003 -j DNAT --to 192.168.2.144:16003
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.144 --dport 5901 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5901 -j DNAT --to 192.168.2.144:5901
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.149 --dport 88 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 88 -j DNAT --to 192.168.2.149:88
/sbin/iptables -t filter -A portfw -i red -o green -p 17 -s 0.0.0.0/0 -d 192.168.2.149 --dport 3074 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 17 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3074 -j DNAT --to 192.168.2.149:3074
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.149 --dport 3074 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 3074 -j DNAT --to 192.168.2.149:3074
/sbin/iptables -t filter -A portfw -i orange -o red -p all -s 0.0.0.0/0 -d 68.178.232.99 -j REJECT
/sbin/iptables -t nat -A portfw_pre -p all -s 0.0.0.0/0 -d 68.178.232.99 -j DNAT --to 68.178.232.99
/sbin/iptables -t filter -A portfw -i green -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.155 --dport 137:139 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 192.168.0.155 --dport 137:139 -j DNAT --to 192.168.0.155
/sbin/iptables -t filter -A portfw -i green -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.155 --dport 445 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 192.168.0.155 --dport 445 -j DNAT --to 192.168.0.155:445
/sbin/iptables -t filter -A portfw -i red -o green -p 6 -s 0.0.0.0/0 -d 192.168.2.201 --dport 54321 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 54321 -j DNAT --to 192.168.2.201:54321
/sbin/iptables -t filter -A portfw -i red -o blue -p 6 -s 0.0.0.0/0 -d 192.168.4.201 --dport 5975 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5975 -j DNAT --to 192.168.4.201:5975
/sbin/iptables -t filter -A portfw -i red -o blue -p 6 -s 0.0.0.0/0 -d 192.168.4.201 --dport 5976 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 5976 -j DNAT --to 192.168.4.201:5976
/sbin/iptables -t filter -A portfw -i red -o orange -p 6 -s 0.0.0.0/0 -d 192.168.0.152 --dport 22224 -j ACCEPT
/sbin/iptables -t nat -A portfw_pre -p 6 -s 0.0.0.0/0 -d 24.40.131.167 --dport 22224 -j DNAT --to 192.168.0.152:22224
/sbin/iptables -t filter -A portfw -i orange -o red -p all -s 0.0.0.0/0 -d 192.168.100.1 -j REJECT
/sbin/iptables -t nat -A portfw_pre -p all -s 0.0.0.0/0 -d 192.168.100.1 -j DNAT --to 192.168.100.1
/sbin/iptables -t filter -A portfw -m state --state NEW -o red -j ACCEPT