Haste

iptables -Fiptables -t nat -Fiptables -P INPUT ACCEPTiptables -P OUTPUT ACCEPTiptables -P FORWARD DROPexport LAN=eth0export WAN=eth1iptables -I INPUT 1 -i ${LAN} -j ACCEPTiptables -I INPUT 1 -i lo -j ACCEPTiptables -A INPUT -p UDP --dport bootps -i ! ${LAN} -j REJECTiptables -A INPUT -p UDP --dport domain -i ! ${LAN} -j REJECTiptables -A INPUT -p TCP --dport ssh -i ${WAN} -j ACCEPTiptables -A INPUT -p TCP -i ! ${LAN} -d 0/0 --dport 0:1023 -j DROPiptables -A INPUT -p UDP -i ! ${LAN} -d 0/0 --dport 0:1023 -j DROPiptables -I FORWARD -i ${LAN} -d 192.168.0.0/255.255.0.0 -j DROPiptables -A FORWARD -i ${LAN} -s 192.168.0.0/255.255.0.0 -j ACCEPTiptables -A FORWARD -i ${WAN} -d 192.168.0.0/255.255.0.0 -j ACCEPTiptables -t nat -A POSTROUTING -o ${WAN} -j MASQUERADEecho 1 > /proc/sys/net/ipv4/ip_forwardfor f in /proc/sys/net/ipv4/conf/*/rp_filter ; do echo 1 > $f ; done# nano /etc/sysctl.conf# Sleng på# net.ipv4.ip_forward = 1# net.ipv4.conf.default.rp_filter = 1