rendered paste body# Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008
*raw
:PREROUTING ACCEPT [110688:134203401]
:OUTPUT ACCEPT [45396:2535385]
COMMIT
# Completed on Mon Feb 11 21:58:20 2008
# Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008
*nat
:PREROUTING ACCEPT [199:15815]
:POSTROUTING ACCEPT [4:429]
:OUTPUT ACCEPT [27:2331]
-A PREROUTING -i eth1 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.10
-A PREROUTING -i eth1 -p tcp -m tcp --dport 3724 -j DNAT --to-destination 192.168.0.10
-A PREROUTING -i eth1 -p tcp -m tcp --dport 6112 -j DNAT --to-destination 192.168.0.10
-A PREROUTING -i eth1 -p tcp -m tcp --dport 6881:6999 -j DNAT --to-destination 192.168.0.10
-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
# Completed on Mon Feb 11 21:58:20 2008
# Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008
*mangle
:PREROUTING ACCEPT [110689:134204474]
:INPUT ACCEPT [63565:94051163]
:FORWARD ACCEPT [47124:40153311]
:OUTPUT ACCEPT [45398:2535717]
:POSTROUTING ACCEPT [92526:42689996]
COMMIT
# Completed on Mon Feb 11 21:58:20 2008
# Generated by iptables-save v1.3.8 on Mon Feb 11 21:58:20 2008
*filter
:INPUT ACCEPT [63365:94027644]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [45397:2537161]
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -i ! eth0 -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -i eth1 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 81 -j ACCEPT
-A INPUT -p udp -m udp --dport 137 -j ACCEPT
-A INPUT -p udp -m udp --dport 138 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 139 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 445 -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 5900 -j ACCEPT
-A INPUT -i eth1 -p udp -m udp --dport 5900 -j ACCEPT
-A INPUT -i ! eth0 -p tcp -m tcp --dport 0:1023 -j DROP
-A INPUT -i ! eth0 -p udp -m udp --dport 0:1023 -j DROP
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth0 -j DROP
-A FORWARD -s 192.168.0.0/255.255.0.0 -i eth0 -j ACCEPT
-A FORWARD -d 192.168.0.0/255.255.0.0 -i eth1 -j ACCEPT
COMMIT
# Completed on Mon Feb 11 21:58:20 2008