Stuff

EXTIF="eth0"
INTIF2="eth2"
INTIF="eth1"

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP

iptables -F
iptables -t nat -F

iptables -I INPUT 1 -i $INTIF -j ACCEPT
iptables -I INPUT 1 -i lo -j ACCEPT
iptables -A INPUT -p UDP --dport bootps -i ! $INTIF -j REJECT
iptables -A INPUT -p UDP --dport domain -i ! $INTIF -j REJECT

iptables -A INPUT -p TCP --dport ssh -i $EXTIF -j ACCEPT
iptables -A INPUT -p TCP --dport ssh -i $INTIF2 -j ACCEPT

iptables -A INPUT -p TCP -i ! $INTIF -d 0/0 --dport 0:1023 -j DROP
iptables -A INPUT -p UDP -i ! $INTIF -d 0/0 --dport 0:1023 -j DROP

iptables -A FORWARD -i $EXTIF -o $INTIF  --dst 10.0.1.233 -p tcp --dport 80 -j ACCEPT


iptables -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT
#iptables -A FORWARD -j LOG

iptables -t nat -A PREROUTING -i $EXTIF -p tcp  --dport 80 -j DNAT --to-destination 10.0.1.233


iptables -t nat -A POSTROUTING -o $INTIF -j MASQUERADE