# cat /etc/iptables.rules
# Generated by iptables-save v1.2.11 on Wed Jul 11 11:27:15 2007
*filter
:INPUT DROP [106:20524]
:FORWARD ACCEPT [7456:3160004]
:OUTPUT ACCEPT [9078:1324306]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j ACCEPT
-A INPUT -i tun1 -j ACCEPT
-A INPUT -i tun2 -j ACCEPT
-A INPUT -i tun3 -j ACCEPT
-A INPUT -s 127.0.0.0/255.0.0.0 -i ! lo -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i ppp0 -p icmp -m icmp --icmp-type 4 -j ACCEPT
-A INPUT -i ppp0 -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -i ppp0 -p icmp -m icmp --icmp-type 12 -j ACCEPT
-A INPUT -p udp -m udp --dport 6666 -j ACCEPT
-A INPUT -i tun0 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
COMMIT
# Completed on Wed Jul 11 11:27:15 2007
# Generated by iptables-save v1.2.11 on Wed Jul 11 11:27:15 2007
*nat
:PREROUTING ACCEPT [2382:177931]
:POSTROUTING ACCEPT [184:12453]
:OUTPUT ACCEPT [180:12093]
-A POSTROUTING -s 10.0.10.0/255.255.255.0 -d ! 10.0.10.0/255.255.255.0 -j MASQUERADE
COMMIT
# Completed on Wed Jul 11 11:27:15 2007