# New FIREWALL Rules set
:INPUT DROP [0:0]
:OUTPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
-A FORWARD -i eth0 -j WAN
-A FORWARD -i eth1 -j LAN
#
# Loopback Rules
#
-A -i lo -j ACCEPT
-A -o lo -j ACCEPT
#
# WAN Rules
#
-A WAN -m state --state ESTABLISHED,RELATED -j ACCEPT
-A WAN -p tcp --dport 22 -m state --state NEW -j ACCEPT
-A WAN -p tcp --dport 80 -m state --state NEW -j ACCEPT
-A WAN -j DROP
#
# LAN Rules
#
-A LAN -d 66.110.24.220 -j DROP
-A LAN -m state --state ESTABLISHED,RELATED -j ACCEPT
-A LAN -p tcp --dport 22 -m state --state NEW -j ACCEPT
-A LAN -p udp --dport 53 -m state --state NEW -j ACCEPT
-A LAN -p tcp --dport 80 -m state --state NEW -j ACCEPT
-A LAN -p udp --dport 137:138 -m state --state NEW -j ACCEPT
-A LAN -p tcp --dport 139 -m state --state NEW -j ACCEPT
-A LAN -p tcp --dport 445 -m state --state NEW -j ACCEPT
-A LAN -p tcp --dport 5901 -m state --state NEW -j ACCEPT
-A LAN -j REJECT --reject-with icmp-port-unreachable
#
# Postrouting Rules
#
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Compliled on Sat Nov 19 12:29:13 2005