iptables -F
iptables -X
iptables -Z
iptables -t nat -F
iptables -t nat -X
iptables -t nat -Z

iptables -t filter -P INPUT DROP


#               PARA ENTRADA
iptables -A INPUT -m state --state INVALID -j DROP
iptables -A INPUT -m state --state RELATED -j ACCEPT

iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 5036 -j ACCEPT

iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 142 --syn -j ACCEPT
iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 3000 --syn -j ACCEPT

iptables -A INPUT -i eth4 -s 0/0 -d 0/0 -j ACCEPT
iptables -A INPUT -i lo -s 0/0 -d 0/0 -j ACCEPT
iptables -A INPUT -i eth4 -m state --state ESTABLISHED,RELATED -j ACCEPT


iptables -A INPUT -m pkttype --pkt-type broadcast -j DROP
iptables -A INPUT -m pkttype --pkt-type multicast -j DROP

iptables -A FORWARD -i eth5 -s 10.1.0.0/255.255.0.0 -j ACCEPT
iptables -A FORWARD -i eth4 -d 10.1.0.0/255.255.0.0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth4 -j MASQUERADE

iptables -t nat -A PREROUTING -d 192.168.0.189 -p tcp --dport 80 -j DNAT --to 10.1.0.3
iptables -t nat -A PREROUTING -d 192.168.0.189 -p udp --dport 80 -j DNAT --to 10.1.0.3