!/bin/bash -x
INET="eth0"                       # internet nic card
LAN_IP="192.168.1.0/24"           # lan  ip range
LAN_BCAST_ADDRESS="192.168.0.255"  # not sure about this one yet 
LAN="eth1"                        # Local network card
IPT="/usr/sbin/iptables"          # location of iptables :D

# Starting rc.firewall script
echo ""
echo "*********************************************************"
echo "       Starting iptables: /etc/rc.d/rc.firewall          "
echo "*********************************************************"
#
# Policies O.o
$IPT -P INPUT DROP
$IPT -P OUTPUT ACCEPT
$IPT -P FORWARD DROP


# Flush it all
$IPT -F
$IPT -t nat -F
$IPT -t mangle -F
$IPT -X

# allow loopback traffic
$IPT -A INPUT -i lo -j ACCEPT
$IPT -A OUTPUT -o lo -j ACCEPT

echo 1 > /proc/sys/net/ipv4/ip_dynaddr
$IPT -A INPUT -i $INET -m state --state RELATED,ESTABLISHED -j ACCEPT
# Allow all packats
$IPT -A OUTPUT -o $LAN -j ACCEPT

#
$IPT -t nat -A POSTROUTING -o $LAN -j MASQUERADE