rendered paste body# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:15 2012*nat:PREROUTING ACCEPT [573221:40303111]:POSTROUTING ACCEPT [928605:53023635]:OUTPUT ACCEPT [931184:53253573]-A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -p udp -j MASQUERADE --to-ports 1024-65535 -A POSTROUTING -s 192.168.122.0/24 -d ! 192.168.122.0/24 -j MASQUERADE COMMIT# Completed on Thu Mar 29 16:41:15 2012# Generated by iptables-save v1.4.1.1 on Thu Mar 29 16:41:15 2012*filter:INPUT ACCEPT [421352192:568982293708]:FORWARD ACCEPT [0:0]:OUTPUT ACCEPT [328301779:819893385688]-A INPUT -i vnet0 -j DROP -A FORWARD -i vnet0 -j DROP -A FORWARD -i vnet0 -j DROP -A FORWARD -d 192.168.122.0/24 -o vnet0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.122.0/24 -i vnet0 -j ACCEPT -A FORWARD -i vnet0 -o vnet0 -j ACCEPT -A FORWARD -o vnet0 -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i vnet0 -j REJECT --reject-with icmp-port-unreachable COMMIT# Completed on Thu Mar 29 16:41:15 2012