1 iptables -t filter -A INPUT -p http -j ACCEPT
2 iptables -t filter -A INPUT -p ftp -j ACCEPT
3 iptables -t filter -A INPUT -p ah -j DROP
4 iptables -t filter -A OUTPUT -p tcp --dport https -j REJECT
5 iptables -t filter -A OUTPUT -p tcp --dport http -j REJECT
6 iptables -t filter -A OUTPUT -p tcp --dport ftp -j REJECT
7 iptables -t filter -A OUTPUT -p tcp --dport ntp -j REJECT
8 iptables -t filter -A OUTPUT -p ah -j ACCEPT
9 iptables -t filter -A OUTPUT -p esp -j ACCEPT
10 iptables -t filter -A FORWARD -p tcp --dport http -j ACCEPT
11 iptables -t filter -A FORWARD -p udp --dport domain -j ACCEPT
12 iptables -t filter -A FORWARD -p tcp --dport 8080 -j REJECT
13 iptables -t filter -A FORWARD -p tcp --dport 3128 -j REJECT
14 iptables -t filter -A FORWARD -p tcp --dport http -j ACCEPT
15 iptables -t filter -A FORWARD -p tcp --dport ftp -j ACCEPT
16 iptables -t filter -A FORWARD -i ppp0 -o eth0 -p tcp -d 192.168.1.33 --dport http -j ACCEPT
17 iptables -t nat -A PREROUTING -i ppp0 -p tcp -d 1.2.3.4 --dport http -j DNAT --to-destination 192.168.1.33
18 iptables -t filter -A FORWARD -i ppp0 -o eth0 -p tcp -d 192.168.1.30 --dport ftp -j ACCEPT
19 iptables -t nat -A PREROUTING -i ppp0 -p tcp -d 1.2.3.4 --dport ftp -j DNAT --to-destination 192.168.1.30
20 iptables -t filter -A FORWARD -i ppp0 -o eth0 -p tcp -d 192.168.1.2 --dport ssh -j ACCEPT
21 iptables -t filter -A FORWARD -i ppp0 -o eth0 -p tcp -d 192.168.1.2 --dport smtp -j ACCEPT
22 iptables -t nat -A PREROUTING -i ppp0 -p tcp -d 1.2.3.4 --dport ssh -j DNAT --to-destination 192.168.1.2
23 iptables -t nat -A PREROUTING -i ppp0 -p tcp -d 1.2.3.4 --dport smtp -j DNAT --to-destination 192.168.1.2