### FORWARDING ### (connections routed through the router) # base case iptables -P FORWARD DROP iptables -A FORWARD -m state --state INVALID -j DROP iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A forwarding_rule -p tcp --dport 80 -i $LAN -o $WAN -j ACCEPT iptables -A forwarding_rule -p tcp --dport 22 -i $LAN -o $WAN -j ACCEPT iptables -A forwarding_rule -j DROP