rendered paste body# Generated by iptables-save v1.3.0 on Fri Mar 14 16:44:25 2008
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
COMMIT
# Completed on Fri Mar 14 16:44:25 2008
# Generated by iptables-save v1.3.0 on Fri Mar 14 16:44:25 2008
*nat
:OUTPUT ACCEPT [9504:1789647]
:POSTROUTING ACCEPT [9505:1789687]
:PREROUTING ACCEPT [221115:16944929]
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -o ppp0 -j MASQUERADE
-A PREROUTING -d 72.246.49.137 -i eth1 -p tcp -m tcp --dport 80 -j DROP
COMMIT
# Completed on Fri Mar 14 16:44:25 2008
# Generated by iptables-save v1.3.0 on Fri Mar 14 16:44:25 2008
*filter
:FORWARD DROP [223:13247]
:INPUT DROP [472:47126]
:OUTPUT ACCEPT [5953:2164692]
-A FORWARD -i ppp0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth1 -o ppp0 -j ACCEPT
-A FORWARD -j LOG
-A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.1.0/255.255.255.0 -i eth1 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -s 211.44.12.109 -i ppp0 -j DROP
-A INPUT -s 222.171.126.5 -i ppp0 -j DROP
-A INPUT -i ppp0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 1723 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 5902 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 2525 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 10000 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 4445 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 4445 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 4569 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 10000:20000 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 8000 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 5060 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 5061 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 5036 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 4662 -j ACCEPT
-A INPUT -i ppp0 -p udp -m udp --dport 6969 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 6881:6889 -j ACCEPT
-A INPUT -i ppp0 -p tcp -m tcp --dport 6969 -j ACCEPT
COMMIT
# Completed on Fri Mar 14 16:44:25 2008