# This file describes the network interfaces available on your system# and how to activate them. For more information, see interfaces(5).# The loopback network interfaceauto loiface lo inet loopback# The primary network interfaceauto eth0iface eth0 inet dhcp pre-up iptables-restore < /etc/iptables.up.rules pre-up ip6tables-restore < /etc/ip6tables.up.rulesauto eth1iface eth1 inet static address 192.168.10.1 netmask 255.255.255.0
# Generated by iptables-save v1.4.12 on Tue Nov 12 22:46:48 2013*nat:PREROUTING ACCEPT [2892:230818]:INPUT ACCEPT [5:1041]:OUTPUT ACCEPT [81:6179]:POSTROUTING ACCEPT [4:776]-A POSTROUTING -o eth0 -j MASQUERADECOMMIT# Completed on Tue Nov 12 22:46:48 2013# Generated by iptables-save v1.4.12 on Tue Nov 12 22:46:48 2013*filter:INPUT ACCEPT [290:251041]:FORWARD ACCEPT [85:4945]:OUTPUT ACCEPT [348:29522]-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT# -A INPUT -p tcp -m tcp --dport 1022 -j ACCEPT-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT-A INPUT -p tcp --dport 7796 -j ACCEPT-A INPUT -p udp --dport 7796 -j ACCEPT-A INPUT -p icmp --icmp-type echo-request -j ACCEPT-A INPUT -i eth0 -m conntrack --ctstate INVALID,NEW -j DROP-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT-A FORWARD -i eth0 -m conntrack --ctstate INVALID,NEW -j DROPCOMMIT# Completed on Tue Nov 12 22:46:48 2013