rendered paste body# iptables-save
# Generated by iptables-save v1.2.11 on Tue Feb 6 14:44:41 2007
*filter
:INPUT DROP [3:848]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [103:63172]
:vpn-in - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i tun0 -j vpn-in
-A INPUT -i tun1 -j vpn-in
-A INPUT -s 10.12.0.0/255.255.0.0 -j vpn-in
-A INPUT -s 10.10.6.0/255.255.255.0 -i eth0 -j ACCEPT
-A INPUT -s 10.10.4.0/255.255.255.0 -i eth0 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags ACK ACK -j ACCEPT
-A INPUT -m state --state ESTABLISHED -j ACCEPT
-A INPUT -m state --state RELATED -j ACCEPT
-A INPUT -p udp -m udp --sport 53 --dport 1024:65535 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 4 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 12 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -p udp -m udp --dport 1179 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1179 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 113 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A FORWARD -d 192.168.1.99 -i eth1 -p tcp -m tcp --dport 80 -j ACCEPT
-A vpn-in -j ACCEPT
COMMIT
# Completed on Tue Feb 6 14:44:41 2007
# Generated by iptables-save v1.2.11 on Tue Feb 6 14:44:41 2007
*mangle
:PREROUTING ACCEPT [132:9991]
:INPUT ACCEPT [118:9151]
:FORWARD ACCEPT [14:840]
:OUTPUT ACCEPT [103:63172]
:POSTROUTING ACCEPT [118:64090]
COMMIT
# Completed on Tue Feb 6 14:44:41 2007
# Generated by iptables-save v1.2.11 on Tue Feb 6 14:44:41 2007
*nat
:PREROUTING ACCEPT [9:1447]
:POSTROUTING ACCEPT [9:574]
:OUTPUT ACCEPT [3:214]
-A PREROUTING -i eth1 -p tcp -m tcp --dport 8099 -j DNAT --to-destination 192.168.1.99:80
-A POSTROUTING -s 10.12.0.0/255.255.0.0 -o eth1 -j MASQUERADE
COMMIT
# Completed on Tue Feb 6 14:44:41 2007