# Generated by iptables-save v1.3.8 on Fri Feb 8 00:18:33 2008 *raw :PREROUTING ACCEPT [7957:1109337] :OUTPUT ACCEPT [4706:662411] COMMIT # Completed on Fri Feb 8 00:18:33 2008 # Generated by iptables-save v1.3.8 on Fri Feb 8 00:18:33 2008 *mangle :PREROUTING ACCEPT [7957:1109337] :INPUT ACCEPT [7381:1059020] :FORWARD ACCEPT [437:32159] :OUTPUT ACCEPT [4709:662807] :POSTROUTING ACCEPT [5200:706263] COMMIT # Completed on Fri Feb 8 00:18:33 2008 # Generated by iptables-save v1.3.8 on Fri Feb 8 00:18:33 2008 *filter :INPUT ACCEPT [106:30585] :FORWARD DROP [24:1604] :OUTPUT ACCEPT [1366:188894] -A INPUT -i lo -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable -A INPUT -i ! eth0 -p udp -m udp --dport 53 -j REJECT --reject-with icmp-port-unreachable -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP -A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP -A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT COMMIT # Completed on Fri Feb 8 00:18:33 2008