rendered paste body# Generated by iptables-save v1.3.8 on Sat Feb 9 16:34:59 2008
*raw
:PREROUTING ACCEPT [210688:183207543]
:OUTPUT ACCEPT [3423:597691]
COMMIT
# Completed on Sat Feb 9 16:34:59 2008
# Generated by iptables-save v1.3.8 on Sat Feb 9 16:34:59 2008
*nat
:PREROUTING ACCEPT [1201:96418]
:POSTROUTING ACCEPT [22:2362]
:OUTPUT ACCEPT [248:19454]
[7:388] -A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.10
[836:56842] -A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
# Completed on Sat Feb 9 16:34:59 2008
# Generated by iptables-save v1.3.8 on Sat Feb 9 16:34:59 2008
*mangle
:PREROUTING ACCEPT [210688:183207543]
:INPUT ACCEPT [4998:672873]
:FORWARD ACCEPT [205672:182533710]
:OUTPUT ACCEPT [3425:597923]
:POSTROUTING ACCEPT [209113:183135505]
COMMIT
# Completed on Sat Feb 9 16:34:59 2008
# Generated by iptables-save v1.3.8 on Sat Feb 9 16:34:59 2008
*filter
:INPUT ACCEPT [1167:310156]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [3425:597923]
[2:168] -A INPUT -i lo -j ACCEPT
[3242:278016] -A INPUT -i eth0 -j ACCEPT
[0:0] -A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable
[0:0] -A INPUT -i ! eth0 -p udp -m udp --dport 53 -j REJECT --reject-with icmp-port-unreachable
[0:0] -A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
[0:0] -A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT
[6:693] -A INPUT -i eth1 -p tcp -m tcp --dport 81 -j ACCEPT
[298:25656] -A INPUT -p udp -m udp --dport 137 -j ACCEPT
[238:52799] -A INPUT -p udp -m udp --dport 138 -j ACCEPT
[43:4731] -A INPUT -p tcp -m tcp --dport 139 -j ACCEPT
[0:0] -A INPUT -p tcp -m tcp --dport 445 -j ACCEPT
[0:0] -A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP
[2:654] -A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP
[0:0] -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP
[80678:5455013] -A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT
[124994:177078697] -A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT
COMMIT
# Completed on Sat Feb 9 16:34:59 2008