rendered paste body# Generated by iptables-save v1.2.6a on Thu Jul 22 16:36:38 2004
*mangle
:PREROUTING ACCEPT [655:65949]
:INPUT ACCEPT [424:41620]
:FORWARD ACCEPT [229:24216]
:OUTPUT ACCEPT [399:30842]
:POSTROUTING ACCEPT [628:55058]
COMMIT
# Completed on Thu Jul 22 16:36:38 2004
# Generated by iptables-save v1.2.6a on Thu Jul 22 16:36:38 2004
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i eth0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j ACCEPT
-A INPUT -s 67.93.222.32/27 -d 67.93.222.55 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth0 -j DROP
-A FORWARD -i eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -s 67.93.222.40 -p tcp -m tcp --dport 3389 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -p tcp -m tcp --dport 110 -j ACCEPT
-A FORWARD -s 67.93.222.32/27 -p tcp -m tcp --dport 143 -j ACCEPT
#-A FORWARD -s 67.93.222.40 -p tcp -m tcp --dport 1433 -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -d 255.255.255.255 -o eth1 -j ACCEPT
-A OUTPUT -d 172.16.2.0/255.255.255.0 -o eth1 -j ACCEPT
-A OUTPUT -d 224.0.0.0/240.0.0.0 -o eth1 -p ! tcp -j ACCEPT
-A OUTPUT -d 172.16.2.0/255.255.255.0 -o eth0 -j LOG
-A OUTPUT -d 172.16.2.0/255.255.255.0 -o eth0 -j DROP
-A OUTPUT -d 255.255.255.255 -o eth0 -j ACCEPT
-A OUTPUT -s 67.93.222.55 -o eth0 -j ACCEPT
-A OUTPUT -s 67.93.222.63 -o eth0 -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -j LOG
-A OUTPUT -j DROP
COMMIT
# Completed on Thu Jul 22 16:36:38 2004
# Generated by iptables-save v1.2.6a on Thu Jul 22 16:36:38 2004
*nat
:PREROUTING ACCEPT [132:11125]
:POSTROUTING ACCEPT [3:206]
:OUTPUT ACCEPT [3:206]
-A PREROUTING -i eth0 -p tcp -m tcp --dport 3389 -j DNAT --to-destination 172.16
.2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.16.
2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.16.2
.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 110 -j DNAT --to-destination 172.16.
2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 143 -j DNAT --to-destination 172.16.
2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 1076 -j DNAT --to-destination 172.16
.2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 1247 -j DNAT --to-destination 172.16
.2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 1433 -j DNAT --to-destination 172.16
.2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 6400 -j DNAT --to-destination 172.16
.2.215
-A PREROUTING -i eth0 -p tcp -m tcp --dport 6401 -j DNAT --to-destination 172.16
.2.215
-A POSTROUTING -s 172.16.2.0/255.255.255.0 -j MASQUERADE
-A POSTROUTING -s 67.93.222.55 -o eth0 -j SNAT --to-source 67.93.222.55
COMMIT
# Completed on Thu Jul 22 16:36:38 2004