# Generated by iptables-save v1.3.8 on Sat Feb 9 14:16:32 2008 *raw :PREROUTING ACCEPT [374:81620] :OUTPUT ACCEPT [89:18618] COMMIT # Completed on Sat Feb 9 14:16:32 2008 # Generated by iptables-save v1.3.8 on Sat Feb 9 14:16:32 2008 *nat :PREROUTING ACCEPT [12:1318] :POSTROUTING ACCEPT [1:249] :OUTPUT ACCEPT [5:728] -A POSTROUTING -o eth1 -j MASQUERADE COMMIT # Completed on Sat Feb 9 14:16:32 2008 # Generated by iptables-save v1.3.8 on Sat Feb 9 14:16:32 2008 *mangle :PREROUTING ACCEPT [375:81672] :INPUT ACCEPT [134:11418] :FORWARD ACCEPT [241:70254] :OUTPUT ACCEPT [91:18850] :POSTROUTING ACCEPT [336:90072] COMMIT # Completed on Sat Feb 9 14:16:32 2008 # Generated by iptables-save v1.3.8 on Sat Feb 9 14:16:32 2008 *filter :INPUT ACCEPT [167:27386] :FORWARD DROP [0:0] :OUTPUT ACCEPT [1691:305465] -A INPUT -i lo -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 53 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 137:139 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 426 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 445 -j ACCEPT -A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable -A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP -A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP -A INPUT -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP -A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT COMMIT # Completed on Sat Feb 9 14:16:32 2008