rendered paste body#!/bin/shservice iptables stopiptables -P OUTPUT ACCEPT#for CHAIN in INPUT FORWARD ; dofor CHAIN in INPUT ; do iptables -P $CHAIN DROPdoneiptables -A INPUT -i lo -j ACCEPTfor CHAIN in INPUT OUTPUT FORWARD ; do iptables -A $CHAIN -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A $CHAIN -m state --state INVALID -j LOG iptables -A $CHAIN -m state --state INVALID -j DROPdoneiptables -A INPUT -p tcp -s 10.0.0.0/24 --dport ssh -j ACCEPTiptables -A INPUT -p tcp -s 10.0.0.0/24 --dport http -j ACCEPTiptables -A INPUT -p tcp -s 10.0.0.0/24 --dport 3128 -j ACCEPTiptables -A INPUT -p icmp -j ACCEPTiptables -t nat -A POSTROUTING -o tun0 -j MASQUERADEservice iptables save