#213.108.75.95 - ip выхода в инет
#192.168.4.223:3389 - ip и порт сервера на котором настроена поркся внутри сети
#213.108.75.yy - ip выхода в инет
*nat
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
#-A PREROUTING -d 213.108.75.yy/32 -p tcp -m tcp --dport 3388 -j DNAT --to-destination 192.168.4.223:3389
#-A PREROUTING -s 192.168.4.0/24 ! -d 192.168.4.0/24 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 7777
#-A POSTROUTING -o eth0 -j MASQUERADE
-A POSTROUTING -s 192.168.4.0/24 -j MASQUERADE
COMMIT
# Completed on Tue Jul 3 17:28:06 2012
# Generated by iptables-save v1.4.7 on Tue Jul 3 17:28:06 2012
*filter
:INPUT DROP [0:0]
#:INPUT ACCEPT [1:212]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:212]
:FRIEND_HOSTS - [0:0]
#
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
#-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
#-A INPUT -p tcp -m tcp --dport 7777 -j FRIEND_HOSTS
-A INPUT -p udp -m udp --dport 5060 -j FRIEND_HOSTS
####-A INPUT -s 93.75.91.65/32 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 3306 -j FRIEND_HOSTS
-A INPUT -p udp -m udp --dport 161 -j FRIEND_HOSTS
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
# my friends
-A FRIEND_HOSTS -s xx.xx.xx.xx/32 -j ACCEPT