rendered paste body# Generated by iptables-save v1.2.11 on Tue Mar 7 12:59:38 2006
*filter
:INPUT ACCEPT [1091409:291700112]
:FORWARD ACCEPT [64:4536]
:OUTPUT ACCEPT [991531:236748260]
:valid-dst - [0:0]
:valid-src - [0:0]
-A INPUT -i 64.6.34.22 -j valid-src
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A FORWARD -d 10.10.15.192 -i eth0 -o eth1 -p tcp -m tcp --sport 1024:65535 --dport 81 -m state --state NEW -j ACCEPT
-A FORWARD -d 10.10.15.192 -i eth0 -o eth1 -p tcp -m tcp --dport 2222 -m state --state NEW -j ACCEPT
-A FORWARD -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i 64.6.34.22 -j valid-src
-A FORWARD -o 64.6.34.22 -j valid-dst
-A OUTPUT -o 64.6.34.22 -j valid-dst
-A valid-dst -d 16.0.0.0/240.0.0.0 -j DROP
-A valid-src -s 0.0.0.0/255.0.0.0 -j DROP
-A valid-src -s 72.16.0.0/255.240.0.0 -j DROP
-A valid-src -s 92.168.0.0/255.255.0.0 -j DROP
-A valid-src -s 16.0.0.0/240.0.0.0 -j DROP
-A valid-src -s 40.0.0.0/248.0.0.0 -j DROP
-A valid-src -s 27.0.0.0/255.0.0.0 -j DROP
-A valid-src -s 0.0.0.0/255.0.0.0 -j DROP
-A valid-src -d 255.255.255.255 -j DROP
-A valid-src -s 169.254.0.0/255.255.0.0 -j DROP
-A valid-src -s 64.6.34.22 -j DROP
COMMIT
# Completed on Tue Mar 7 12:59:38 2006
# Generated by iptables-save v1.2.11 on Tue Mar 7 12:59:38 2006
*nat
:PREROUTING ACCEPT [180885:62162980]
:POSTROUTING ACCEPT [41885:3074998]
:OUTPUT ACCEPT [56262:4126051]
-A PREROUTING -d 64.6.34.22 -i eth0 -p tcp -m tcp --sport 1024:65535 --dport 81 -j DNAT --to-destination 10.10.15.192:80
-A PREROUTING -d 64.6.34.22 -i eth0 -p tcp -m tcp --dport 2222 -j DNAT --to-destination 10.10.15.192:22
-A POSTROUTING -o eth0 -j SNAT --to-source 64.6.34.22
COMMIT