1 iptables -t filter -A INPUT -m physdev --physdev-in eth0 -j DROP
2 iptables -t filter -A INPUT -m physdev --physdev-in ppp0 -j DROP
3 iptables -t filter -A INPUT -m physdev --physdev-in ! eth1 -j ACCEPT
4 iptables -t filter -A INPUT -m physdev --physdev-out ppp1 -j ACCEPT
5 iptables -t filter -A INPUT -m physdev --physdev-out ! ppp2 -j ACCEPT
6 iptables -t filter -A INPUT -m physdev --physdev-is-in -j DROP
7 iptables -t filter -A INPUT -m physdev ! --physdev-is-in -j ACCEPT
8 iptables -t filter -A INPUT -m physdev --physdev-is-out -j ACCEPT
9 iptables -t filter -A INPUT -m physdev ! --physdev-is-out -j DROP
10 iptables -t filter -A INPUT -m physdev --physdev-is-bridged -j REJECT
11 iptables -t filter -A INPUT -m physdev ! --physdev-is-bridged -j ACCEPT