## No Clue
*raw
:PREROUTING ACCEPT [2472334:3417114586]
:OUTPUT ACCEPT [1555427:147220333]
COMMIT
*nat
:PREROUTING ACCEPT [5484:905294]
:POSTROUTING ACCEPT [228:33983]
:OUTPUT ACCEPT [581:299193]
-A POSTROUTING -o eth1 -j MASQUERADE 
COMMIT
*mangle
:PREROUTING ACCEPT [2472334:3417114586]
:INPUT ACCEPT [2456653:3405021098]
:FORWARD ACCEPT [15291:11966211]
:OUTPUT ACCEPT [1555427:147220333]
:POSTROUTING ACCEPT [1572290:159428782]
COMMIT
*filter
:INPUT ACCEPT [1345452:2004942674]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [1538338:143603836]

## Accept all Local/LAN
-A INPUT -i lo -j ACCEPT 
-A INPUT -i eth0 -j ACCEPT

## Accept from WAN
# SSH/HTTP/DNS/SAMBA
-A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT 

-A INPUT -i eth1 -p tcp -m tcp --dport 81 -j ACCEPT 

-A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT 
-A INPUT -i eth1 -p udp -m udp --dport 53 -j ACCEPT 

-A INPUT -i eth1 -p tcp -m tcp --dport 137:139 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 426 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 445 -j ACCEPT

## Forward Ports
-t nat -A PREROUTING -p tcp --dport 80 -i eth1 -j DNAT --to 192.168.0.10


## NAT
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP 
-A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT 
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT 

## UnKnown, i think this drops all
-A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable 
-A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP 
-A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP 


## Save
COMMIT