7 saddr 127.0.0.1/32 daddr 127.0.0.1/32 ACCEPT;
8 saddr 192.168.0.0/24 daddr 0/0 ACCEPT; # for masquerading subnets
16 ! syn sport ftp-data dport 1024: ACCEPT;
24 LOG log-level info log-prefix "Firewall: ";
28 chain FORWARD policy ACCEPT;
33 saddr 192.168.0.1/24 MASQ; # for masquerading subnets