# Generated by iptables-save v1.3.6 on Sun Jun 17 19:31:04 2007
*nat
:PREROUTING ACCEPT [74:21614]
:POSTROUTING ACCEPT [6:343]
:OUTPUT ACCEPT [51:3541]
-A POSTROUTING -o ath0 -j MASQUERADE
-A POSTROUTING -o ath0 -j MASQUERADE
-A POSTROUTING -o eth1 -j MASQUERADE
-A POSTROUTING -o ath0 -j MASQUERADE
COMMIT
# Completed on Sun Jun 17 19:31:04 2007
# Generated by iptables-save v1.3.6 on Sun Jun 17 19:31:04 2007
*mangle
:PREROUTING ACCEPT [5221:2287932]
:INPUT ACCEPT [3520:846799]
:FORWARD ACCEPT [1646:1421498]
:OUTPUT ACCEPT [4193:368104]
:POSTROUTING ACCEPT [5841:1790103]
COMMIT
# Completed on Sun Jun 17 19:31:04 2007
# Generated by iptables-save v1.3.6 on Sun Jun 17 19:31:04 2007
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [4193:368104]
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 113 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 445 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5223 -m state --state NEW -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 7000:7010 -j ACCEPT
-A INPUT -j DROP
-A FORWARD -i ath0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth1 -o ath0 -j ACCEPT
-A fail2ban-proftpd -j RETURN
-A fail2ban-ssh -j RETURN
COMMIT