All pastes #579981 Raw Edit

Stuff

public text v1 · immutable
·published 2007-06-20 22:28 UTC
rendered paste body
	### FORWARDING
	### (connections routed through the router)
	
	# base case
	iptables -P FORWARD DROP 
	iptables -A FORWARD -m state --state INVALID -j DROP
	iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
	iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
	
        iptables -A forwarding_rule -p tcp --dport 80 -i $LAN -o $WAN -j ACCEPT
        iptables -A forwarding_rule -p tcp --dport 22 -i $LAN -o $WAN -j ACCEPT
        iptables -A forwarding_rule -j DROP