#!/bin/sh


iptables -F
iptables -t nat -F

iptables -P INPUT DROP

iptables -P FORWARD ACCEPT

iptables -P OUTPUT ACCEPT



iptables -A INPUT -i lo -j ACCEPT


iptables -A INPUT -p icmp -j ACCEPT


iptables -A INPUT -p igmp -j ACCEPT

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A INPUT -p tcp --dport 443 -j ACCEPT


iptables -A INPUT -p tcp --dport 80 -j ACCEPT


# NTP
iptables -A INPUT -p udp --dport 123 -j ACCEPT -i eth0
# iptables -A OUTPUT -p udp --sport 123 -j ACCEPT par obligatoire dans ma config ?

# rsync
iptables -A INPUT -p tcp --dport 873 -j ACCEPT -i eth0

iptables -A INPUT -j REJECT

iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE