rendered paste bodyfor SAMBA_CLIENT in ${MY_SAMBA_CLIENTS}; do
iptables -A INPUT -i $EXTERNAL_INTERFACE -p UDP \
--sport $UNPRIVPORTS --dport 137 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p UDP -m state --state ESTABLISHED,RELATED \
--sport 137 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT
iptables -A INPUT -i $EXTERNAL_INTERFACE -p UDP \
--sport $UNPRIVPORTS --dport 138 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p UDP -m state --state ESTABLISHED,RELATED \
--sport 138 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT
iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP \
--sport $UNPRIVPORTS --dport 139 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP -m state --state ESTABLISHED,RELATED \
--sport 139 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT
iptables -A INPUT -i $EXTERNAL_INTERFACE -p TCP \
--sport $UNPRIVPORTS --dport 445 -s $SAMBA_CLIENT -d $EXTERNAL_IP -j ACCEPT
iptables -A OUTPUT -o $EXTERNAL_INTERFACE -p TCP -m state --state ESTABLISHED,RELATED \
--sport 445 --dport $UNPRIVPORTS -s $EXTERNAL_IP -d $SAMBA_CLIENT -j ACCEPT
done