/sbin/iptables -F
/sbin/iptables -X
/sbin/iptables -t filter -A INPUT -s 0.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 0.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 1.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 1.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 2.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 2.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 5.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 5.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 7.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 7.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 23.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 23.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 27.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 27.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 31.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 31.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 36.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 36.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 37.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 37.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 39.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 39.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 41.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 41.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 42.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 42.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 58.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 58.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 59.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 59.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 60.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 60.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 69.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 69.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 70.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 70.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 71.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 71.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 72.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 72.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 73.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 73.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 74.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 74.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 75.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 75.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 76.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 76.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 77.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 77.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 78.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 78.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 79.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 79.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 82.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 82.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 83.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 83.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 84.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 84.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 85.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 85.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 86.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 86.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 87.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 87.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 88.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 88.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 89.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 89.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 90.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 90.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 91.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 91.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 92.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 92.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 93.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 93.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 94.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 94.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 95.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 95.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 96.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 96.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 97.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 97.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 98.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 98.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 99.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 99.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 100.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 100.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 101.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 101.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 102.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 102.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 103.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 103.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 104.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 104.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 105.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 105.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 106.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 106.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 107.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 107.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 108.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 108.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 109.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 109.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 110.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 110.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 111.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 111.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 112.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 112.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 113.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 113.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 114.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 114.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 115.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 115.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 116.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 116.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 117.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 117.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 118.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 118.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 119.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 119.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 120.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 120.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 121.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 121.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 122.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 122.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 123.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 123.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 124.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 124.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 125.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 125.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 126.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 126.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 127.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 127.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 197.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 197.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 240.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 240.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 241.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 241.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 242.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 242.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 243.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 243.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 244.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 244.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 245.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 245.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 246.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 246.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 247.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 247.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 248.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 248.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 249.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 249.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 250.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 250.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 251.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 251.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 252.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 252.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 253.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 253.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 254.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 254.0.0.0/8 -j DROP
/sbin/iptables -t filter -A INPUT -s 255.0.0.0/8 -j DROP
/sbin/iptables -t filter -A FORWARD -s 255.0.0.0/8 -j DROP
/sbin/iptables -t nat -P OUPUT DROP
/sbin/iptables -t nat -P PREROUTING DROP
/sbin/iptables -t nat -P POSROUTING DROP
/sbin/iptables -t filter -P OUPUT DROP
/sbin/iptables -t filter -P FORWARD DROP
/sbin/iptables -t filter -P INPUT DROP
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 443 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 443 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 443 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 443 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 443 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 443 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 443 -d 192.168.1.23 --destination-port 1024: -i eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.13 --source-port 1024: -d 0.0.0.0/0 --destination-port 443 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 0.0.0.0/0 --source-port 443 -d 192.168.1.13 --destination-port 1024: -i eth1 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A INPUT -p udp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 53 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.23 --source-port 53 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p udp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 53 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p udp -s 0.0.0.0/0 --source-port 53 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p udp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 53 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A INPUT -p udp -s 0.0.0.0/0 --source-port 1024: -d 192.168.1.13 --destination-port 53 -i eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.13 --source-port 53 -d 0.0.0.0/0 --destination-port 1024: -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p udp -s 0.0.0.0/0 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 53 -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p udp -s 192.168.1.16/255.255.255.240 --source-port 53 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 53 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p udp -s 192.168.1.16/255.255.255.240 --source-port 53 -d 192.168.1.23 --destination-port 1024: -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.13 --source-port 1024: -d 0.0.0.0/0 --destination-port 53 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p udp -s 0.0.0.0/0 --source-port 53 -d 192.168.1.13 --destination-port 1024: -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 80 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 80 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 80 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 80 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 80 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 80 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 80 -d 192.168.1.23 --destination-port 1024: -i eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.13 --source-port 1024: -d 0.0.0.0/0 --destination-port 80 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 0.0.0.0/0 --source-port 80 -d 192.168.1.13 --destination-port 1024: -i eth1 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 110 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 110 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 110 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 110 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 110 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 110 -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 110 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A INPUT -p udp --source-port 68 -d 255.255.255.255 --destination-port 67 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.23 --source-port 67 -d 255.255.255.255 --destination-port 68 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p udp -s 192.168.1.16/255.255.255.240 --source-port 68 -d 192.168.1.23 --destination-port 67 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p udp -s 192.168.1.23 --source-port 67 -d 192.168.1.16/255.255.255.240 --destination-port 68 -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 25 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 25 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 25 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 25 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 25 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A INPUT -p tcp -s 0.0.0.0/0 --source-port 1024: -d 192.168.1.13 --destination-port 25 -i eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.13 --source-port 25 -d 0.0.0.0/0 --destination-port 1024: -o eth1 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 25 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 25 -d 192.168.1.23 --destination-port 1024: -i eth0 ! -f -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.13 --source-port 1024: -d 0.0.0.0/0 --destination-port 25 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 0.0.0.0/0 --source-port 25 -d 192.168.1.13 --destination-port 1024: -i eth1 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 8484 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 8484 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 8484 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 8484 -d 192.168.1.23 --destination-port 1024: -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 192.168.1.23 --destination-port 22 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 22 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -o eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 22 -i eth0 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p tcp -s 0.0.0.0/0 --source-port 22 -d 192.168.1.16/255.255.255.240 --destination-port 1024: -i eth1 -o eth0 -m state --state NEW,RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p tcp -s 192.168.1.16/255.255.255.240 --source-port 1024: -d 0.0.0.0/0 --destination-port 22 -i eth0 -m state --state NEW,RELATED,ESTABLISHED -j MASQUERADE
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.23 --source-port 1024: -d 192.168.1.16/255.255.255.240 --destination-port 22 -o eth0 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 192.168.1.16/255.255.255.240 --source-port 22 -d 192.168.1.23 --destination-port 1024: -i eth0 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p tcp -s 192.168.1.13 --source-port 1024: -d 0.0.0.0/0 --destination-port 22 -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A INPUT -p tcp -s 0.0.0.0/0 --source-port 22 -d 192.168.1.13 --destination-port 1024: -i eth1 -m state --state RELATED,ESTABLISHED ! --syn -j ACCEPT
/sbin/iptables -t filter -A INPUT -p icmp -s 192.168.1.16/255.255.255.240 -d 192.168.1.23 -i eth0 --icmp-type echo-request -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p icmp -s 192.168.1.23 -d 192.168.1.16/255.255.255.240 -o eth0 --icmp-type echo-reply -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p icmp -s 192.168.1.16/255.255.255.240 -d 0.0.0.0/0 -i eth0 -o eth1 --icmp-type echo-request -j ACCEPT
/sbin/iptables -t filter -A FORWARD -p icmp -s 0.0.0.0/0 -d 192.168.1.16/255.255.255.240 -i eth1 -o eth0 --icmp-type echo-reply -j ACCEPT
/sbin/iptables -t nat -A PREROUTING -p icmp -s 192.168.1.16/255.255.255.240 -d 0.0.0.0/0 -i eth0 --icmp-type echo-request -j MASQUERADE
/sbin/iptables -t filter -A OUTPUT -p icmp -s 192.168.1.23 -d 192.168.1.16/255.255.255.240 -o eth0 --icmp-type echo-request -j ACCEPT
/sbin/iptables -t filter -A INPUT -p icmp -s 192.168.1.16/255.255.255.240 -d 192.168.1.23 -i eth0 --icmp-type echo-reply -j ACCEPT
/sbin/iptables -t filter -A OUTPUT -p icmp -s 192.168.1.13 -d 0.0.0.0/0 -o eth1 --icmp-type echo-request -j ACCEPT
/sbin/iptables -t filter -A INPUT -p icmp -s 0.0.0.0/0 -d 192.168.1.13 -i eth1 --icmp-type echo-reply -j ACCEPT