root@Scranton:/etc$ vi /etc/firewall.user
#!/bin/sh
# Copyright (C) 2006 OpenWrt.org

iptables -F input_rule
iptables -F output_rule
iptables -F forwarding_rule
iptables -t nat -F prerouting_rule
iptables -t nat -F postrouting_rule

# The following chains are for traffic directed at the IP of the
# WAN interface

iptables -F input_wan
iptables -F forwarding_wan
iptables -t nat -F prerouting_wan

### Open port to WAN
## -- This allows port 22 to be answered by (dropbear on) the router
iptables -t nat -A prerouting_wan -p tcp --dport 22 -j ACCEPT
iptables        -A input_wan      -p tcp --dport 22 -j ACCEPT
iptables -t nat -A prerouting_wan -p tcp --dport 8443 -j ACCEPT
iptables        -A input_wan      -p tcp --dport 8443 -j ACCEPT

### Port forwarding
iptables        -A forwarding_rule -i br0 -o br0 -j ACCEPT
iptables -t nat -A postrouting_rule -o br0 -s 192.168.1.201/255.255.255.0 -d 192.168.1.201/255.255.255.0 -j SNAT --to 19
iptables -t nat -A prerouting_wan -p tcp --dport 80 -j DNAT --to 192.168.1.201:80
iptables        -A forwarding_wan -p tcp --dport 80 -d 192.168.1.201 -j ACCEPT

iptables -t nat -A prerouting_wan -p tcp --dport 21 -j DNAT --to 192.168.1.201:21
iptables        -A forwarding_wan -p tcp --dport 21 -d 192.168.1.201 -j ACCEPT

iptables -t nat -A prerouting_wan -p tcp --dport 6201 -j DNAT --to 192.168.1.201:6201
iptables        -A forwarding_wan -p tcp --dport 6201 -d 192.168.1.201 -j ACCEPT