#! /bin/sh
# eth0 public
# eth1 private
logger -is LOADING IPTABLES SCRIPT

if [ -e /proc/sys/net/ipv4/ip_forward ]; then
   echo Enabling IP FORWARDING...
   echo 1 > /proc/sys/net/ipv4/ip_forward
fi

/sbin/iptables -F
/sbin/iptables -t nat -F
/sbin/iptables -t filter -F
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P OUTPUT ACCEPT

#Switch on masq stuff.
/sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
/sbin/iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

#apply default minimum cost priority
#/sbin/iptables -A OUTPUT -p tcp -d ! 192.168.0.0/16 -t 0x01 0x02

#
# Reject everything on the outside interface.
# Except ftp and ssh
#
# Drop stuff
/sbin/iptables -A INPUT -p udp -i eth0 --dport 631 -j REJECT
/sbin/iptables -A INPUT -p tcp -i eth0 --dport 631 -j REJECT
/sbin/iptables -A INPUT -p udp -i eth0 --dport 111 -j REJECT

/sbin/iptables -A INPUT -p udp -i eth0 --dport 860 -j REJECT
/sbin/iptables -A INPUT -p udp -i eth0 --dport 857 -j REJECT
/sbin/iptables -A INPUT -p udp -i eth0 --dport 863 -j REJECT

/sbin/iptables -A INPUT -p udp -i eth0 --dport 137 -j REJECT
/sbin/iptables -A INPUT -p udp -i eth0 --dport 138 -j REJECT