# Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008 *raw :PREROUTING ACCEPT [110688:134203401] :OUTPUT ACCEPT [45396:2535385] COMMIT # Completed on Mon Feb 11 21:58:20 2008 # Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008 *nat :PREROUTING ACCEPT [199:15815] :POSTROUTING ACCEPT [4:429] :OUTPUT ACCEPT [27:2331] -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.10 -A PREROUTING -i eth1 -p tcp -m tcp --dport 3724 -j DNAT --to-destination 192.168.0.10 -A PREROUTING -i eth1 -p tcp -m tcp --dport 6112 -j DNAT --to-destination 192.168.0.10 -A PREROUTING -i eth1 -p tcp -m tcp --dport 6881:6999 -j DNAT --to-destination 192.168.0.10 -A POSTROUTING -o eth1 -j MASQUERADE COMMIT # Completed on Mon Feb 11 21:58:20 2008 # Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008 *mangle :PREROUTING ACCEPT [110689:134204474] :INPUT ACCEPT [63565:94051163] :FORWARD ACCEPT [47124:40153311] :OUTPUT ACCEPT [45398:2535717] :POSTROUTING ACCEPT [92526:42689996] COMMIT # Completed on Mon Feb 11 21:58:20 2008 # Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008 *filter :INPUT ACCEPT [63365:94027644] :FORWARD DROP [0:0] :OUTPUT ACCEPT [45397:2537161] -A INPUT -i lo -j ACCEPT -A INPUT -i eth0 -j ACCEPT -A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 81 -j ACCEPT -A INPUT -p udp -m udp --dport 137 -j ACCEPT -A INPUT -p udp -m udp --dport 138 -j ACCEPT -A INPUT -p tcp -m tcp --dport 139 -j ACCEPT -A INPUT -p tcp -m tcp --dport 445 -j ACCEPT -A INPUT -i eth1 -p tcp -m tcp --dport 5900 -j ACCEPT -A INPUT -i eth1 -p udp -m udp --dport 5900 -j ACCEPT -A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP -A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP -A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT COMMIT # Completed on Mon Feb 11 21:58:20 2008