rendered paste body# Generated by iptables-save v1.3.0 on Sat Nov 19 11:58:13 2005
*filter
:FORWARD DROP [0:0]
:INPUT DROP [44154:12278488]
:OUTPUT ACCEPT [1218:127491]
-A FORWARD -i eth1 -o eth0 -j ACCEPT
-A FORWARD -s 192.168.2.0/255.255.255.0 -i eth1 -o eth0 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -d 66.110.24.220 -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 66.110.24.220 -i eth0 -j DROP
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p udp -m udp --dport 137:138 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p tcp -m tcp --dport 139 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p tcp -m tcp --dport 445 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 192.168.2.0/255.255.255.0 -i eth1 -p tcp -m tcp --dport 5901 -j ACCEPT
-A OUTPUT -s 192.168.2.0/255.255.255.0 -o eth0 -j DROP
-A OUTPUT -d 66.110.24.220 -j DROP
COMMIT
# Completed on Sat Nov 19 11:58:13 2005
# Generated by iptables-save v1.3.0 on Sat Nov 19 11:58:13 2005
*nat
:OUTPUT ACCEPT [27:1975]
:POSTROUTING ACCEPT [27:1975]
:PREROUTING ACCEPT [41713:11591559]
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -o eth0 -j SNAT --to-source xxx.xxx.xxx.xx
COMMIT
# Completed on Sat Nov 19 11:58:13 2005