#!/bin/sh

VPN_SERVER_IP=X.X.X.X

iptables --flush
iptables --delete-chain
iptables --zero

iptables --policy INPUT DROP
iptables --policy FORWARD DROP
iptables --policy OUTPUT DROP

iptables --append INPUT --match state --state ESTABLISHED,RELATED --jump ACCEPT
iptables --append INPUT --in-interface lo --jump ACCEPT

iptables --append OUTPUT --out-interface eth0 --destination "$VPN_SERVER_IP" --jump ACCEPT
iptables --append OUTPUT --out-interface tun0 --jump ACCEPT