rendered paste body# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:02 2012*nat:PREROUTING ACCEPT [573218:40302716]:POSTROUTING ACCEPT [928602:53023283]:OUTPUT ACCEPT [931181:53253221]-A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -j MASQUERADE COMMIT# Completed on Thu Mar 29 16:41:02 2012# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:02 2012*filter:INPUT ACCEPT [421342995:568979599367]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [328293296:819892001803]-A INPUT -i vnet0 -j DROP -A FORWARD -i vnet0 -j DROP -A FORWARD -i vnet0 -j DROP -A FORWARD -d 192.168.122.0/24 -o vnet0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i vnet0 -j ACCEPT -A FORWARD -i vnet0 -o vnet0 -j ACCEPT -A FORWARD -o vnet0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i vnet0 -j REJECT --reject-with icmp-port-unreachable COMMIT# Completed on Thu Mar 29 16:41:02 2012