rendered paste body#!/bin/bash
#echo 1 > /proc/sys/net/ipv4/ip_forward # For quick Enable IP FORWARDING
#echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter
iptables -F
iptables -t nat -F
modprobe ip_nat_ftp
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
###############################################################################
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
###############################################################################
iptables -A INPUT -p tcp --dport 8080 -j ACCEPT #Proxy Server
iptables -A INPUT -p tcp --dport 22 -j ACCEPT #SSH
iptables -A INPUT -p tcp --dport 10000 -j ACCEPT #Webmin
########## BIND PORTS ##########
iptables -A INPUT -p tcp --dport 42 -j ACCEPT
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -p udp --dport 53 -j ACCEPT
################################
iptables -A INPUT -p udp --dport 67 -j ACCEPT
iptables -A INPUT -p tcp --dport 67 -j ACCEPT
iptables -A INPUT -p tcp --dport 68 -j ACCEPT
iptables -A INPUT -p udp --dport 68 -j ACCEPT
#####################################################################
iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080 # Transparent
###############################################################################
# Applying this changes will be applied on your Clients.
iptables -A FORWARD -p tcp --dport 20 -j ACCEPT # FTP
iptables -A FORWARD -p tcp --dport 21 -j ACCEPT # FTP
iptables -A FORWARD -p udp --dport 20 -j ACCEPT
iptables -A FORWARD -p udp --dport 21 -j ACCEPT
iptables -A FORWARD -p tcp --dport 22 -j ACCEPT # SSH
iptables -A FORWARD -p tcp --dport 25 -j ACCEPT # Simple Mail Transfer Protocol(SMTP)
iptables -A FORWARD -p tcp --dport 110 -j ACCEPT # Exchange Server listens
iptables -A FORWARD -p tcp --dport 143 -j ACCEPT # Email clients retrieve mail by IMAP
iptables -A FORWARD -p tcp --dport 80 -j REJECT # HTTP
iptables -A FORWARD -p tcp --dport 443 -j ACCEPT # Secure Sockets Layer (SSL)
iptables -A FORWARD -p tcp --dport 1863 -j ACCEPT # Instant Messenging
iptables -A FORWARD -p tcp --dport 5000 -j ACCEPT # Universal plug and play service(UPNP)
iptables -A FORWARD -p tcp --dport 5001 -j ACCEPT #
iptables -A FORWARD -p tcp --dport 5005 -j ACCEPT #
iptables -A FORWARD -p tcp --dport 5050 -j ACCEPT # Yahoo Chat & Messenger
iptables -A FORWARD -p tcp --dport 5100 -j ACCEPT # Yahoo Messenger - Webcams,Video
iptables -A FORWARD -p tcp --dport 6660:6670 -j ACCEPT # mIRC
iptables -A FORWARD -p tcp --dport 7000 -j ACCEPT # mIRC
iptables -A FORWARD -p tcp --dport 28805 -j ACCEPT # Multiplayer games
iptables -A FORWARD -p tcp --dport 32196 -j ACCEPT # Try Google Search
iptables -A FORWARD -p tcp --dport 27315 -j ACCEPT #
iptables -A FORWARD -p tcp --dport 51215 -j ACCEPT # For chat.mobilinksms.com
iptables -A FORWARD -p tcp --dport 5125 -j ACCEPT # WORLD CHESS PORT
iptables -A FORWARD -p tcp --dport 12141 -j ACCEPT # http://www.mixchaat.com/sms/
iptables -A FORWARD -p tcp --dport 11999 -j ACCEPT # For Yahoo Games
iptables -A FORWARD -p tcp --dport 19865 -j ACCEPT # My psyBNC port heh
iptables -A FORWARD -p tcp --dport 53 -j ACCEPT # DNS server forward on Convert IP
iptables -A FORWARD -p udp --dport 53 -j ACCEPT
iptables -A FORWARD -p tcp --dport 27015 -j ACCEPT # CS
iptables -A FORWARD -p tcp --dport 27016 -j ACCEPT # CS
iptables -A FORWARD -p udp --dport 27015 -j ACCEPT # CS
iptables -A FORWARD -p udp --dport 27016 -j ACCEPT # CS
iptables -A FORWARD -p tcp --dport 11999 -j ACCEPT # YAGOO GAMES
iptables -A FORWARD -p tcp --dport 19127 -j ACCEPT # Rashid psyBNC
iptables -A FORWARD -p udp --dport 19127 -j ACCEPT # Rashid psyBNC
#########################################################################
iptables -t nat -A POSTROUTING -j MASQUERADE
########################################################################