/sbin/iptables -F /sbin/iptables -X /sbin/iptables -t nat -F /sbin/iptables -t nat -X /sbin/iptables -P INPUT DROP /sbin/iptables -P OUTPUT ACCEPT /sbin/iptables -P FORWARD ACCEPT /sbin/iptables -A INPUT -p tcp -d 192.168.39.1 --dport 67 -j ACCEPT /sbin/iptables -A INPUT -p tcp -d 192.168.39.1 --dport 53 -j ACCEPT /sbin/iptables -A INPUT -p tcp --dport 123 -j ACCEPT /sbin/iptables -A INPUT -p tcp --dport 2048 -j ACCEPT /sbin/iptables -A INPUT -p tcp --dport 443 -j ACCEPT /sbin/iptables -A INPUT -p tcp --dport 80 -j ACCEPT /sbin/iptables -A INPUT -p tcp --dport 113 -j ACCEPT /sbin/iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT /sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE /sbin/iptables -A FORWARD -i ppp0 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT /sbin/iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu /sbin/iptables -A FORWARD -i eth0 -o ppp0 -j ACCEPT /sbin/iptables -t nat -A PREROUTING -p tcp --dport 10301 -j DNAT --to-destination 192.168.39.4 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 10201 -j DNAT --to-destination 192.168.39.4 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 10101 -j DNAT --to-destination 192.168.39.4 echo 1 > /proc/sys/net/ipv4/ip_forward