# Generated by iptables-save v1.4.12 on Fri Jan 13 16:55:34 2017 *filter :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p tcp -m tcp -m state --dport 1723 --state NEW -j ACCEPT -A INPUT -p gre -j ACCEPT -A INPUT -p tcp -m tcp ! -i eth0 --dport 80 -j DROP -A INPUT -p tcp -m tcp ! -i eth0 --dport 443 -j DROP -A FORWARD -d 192.168.0.0/24 -i eth0 -j ACCEPT -A FORWARD -s 192.168.0.0/24 -o eth0 -j ACCEPT COMMIT # Completed on Fri Jan 13 16:55:34 2017 # Generated by iptables-save v1.4.12 on Fri Jan 13 16:55:34 2017 *mangle :PREROUTING ACCEPT [928342914:805758336343] :INPUT ACCEPT [300273012:321462553092] :FORWARD ACCEPT [628000687:484289634334] :OUTPUT ACCEPT [270983625:397708956565] :POSTROUTING ACCEPT [898983476:881998489951] COMMIT # Completed on Fri Jan 13 16:55:34 2017 # Generated by iptables-save v1.4.12 on Fri Jan 13 16:55:34 2017 *nat :INPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] -A PREROUTING -p tcp -m tcp -d 46.228.10.26/32 --dport 1723 -j DNAT --to-destination 192.168.0.3:1723 -A POSTROUTING -p tcp -m tcp -d 192.168.0.3/32 --dport 1723 -j SNAT --to-source 46.228.10.26 -A POSTROUTING -s 10.0.1.9/32 ! -d 192.168.0.0/24 -o eth2 -j SNAT --to-source 46.228.4.115 -A POSTROUTING -s 10.0.1.3/32 ! -d 192.168.0.0/24 -o eth4 -j SNAT --to-source 46.228.10.99 -A POSTROUTING -s 10.0.1.7/32 ! -d 192.168.0.0/24 -o eth1 -j SNAT --to-source 46.228.10.27 -A POSTROUTING -s 10.0.1.10/32 ! -d 192.168.0.0/24 -o eth2 -j SNAT --to-source 46.228.4.115 -A PREROUTING -p tcp -m tcp -s 192.168.0.0/24 ! -d 192.168.0.0/24 -i eth0 --dport 80 -j DNAT --to-destination 192.168.0.22:3128