#ACTION         SOURCE          DEST            PROTO   DEST    SOURCE  ORIGINAL                RATE    USER/
#                                                       PORT    PORT(S) DEST                    LIMIT   GROUP
#
#       Accept DNS connections from the firewall to the network, and from local to the firewall
#
ACCEPT          fw              net             tcp     53
ACCEPT          fw              net             udp     53
ACCEPT          loc             fw              tcp     53
ACCEPT          loc             fw              udp     53
#
#       Accept SSH connections from the local network for administration
#
ACCEPT          loc             fw              tcp     ssh
ACCEPT          loc             fw              tcp     www

#       Allow Ping To And From Firewall and to Net
#
ACCEPT          loc             fw              icmp    8
ACCEPT          loc             net             icmp    8
ACCEPT          net             fw              icmp    8
ACCEPT          fw              loc             icmp
ACCEPT          fw              net             icmp
#
#       Socks4
#
ACCEPT          loc             fw              tcp     socks
ACCEPT          loc             fw              udp     socks
#
#       Redirect for Squid/Clamsmtp/etc..
#
REDIRECT        loc             3128            tcp     www     -       !192.168.1.1,216.10.50.7
REDIRECT        loc             10025           tcp     smtp    -       !192.168.1.1,216.10.50.7
#
#       Allow HTTP/SSH/VPN/DNS/IMAP(S)/POP(S)/SMTP(S)
#
ACCEPT          loc             net             tcp     ssh
ACCEPT          loc             net             tcp     www
ACCEPT          loc             net             tcp     domain
ACCEPT          loc             net             udp     domain
ACCEPT          loc             net             tcp     imap2,imap3,imaps
ACCEPT          loc             net             tcp     pop2,pop3,pop3s
ACCEPT          loc             net             tcp     smtp,ssmtp
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE