# Generated by iptables-save v1.3.5 on Wed Jul 27 17:54:56 2011
*nat
:PREROUTING ACCEPT [26:1379]
:POSTROUTING ACCEPT [442:21300]
:OUTPUT ACCEPT [5:300]
-A PREROUTING -d ip_public -p tcp -m tcp --dport 81 -j DNAT --to-destination 10.0.0.22:80
-A PREROUTING -d ip_public -p tcp -m tcp --dport 1521 -j DNAT --to-destination 10.0.0.22:1521
-A PREROUTING -d ip_public -p tcp -m tcp --dport 1723 -j DNAT --to-destination 10.0.0.10:1723
-A PREROUTING -d ip_public -p tcp -m tcp --dport 8080 -j DNAT --to-destination 10.0.0.22:8080
-A POSTROUTING -s 10.0.0.0/255.255.255.0 -j MASQUERADE
COMMIT
# Completed on Wed Jul 27 17:54:56 2011
# Generated by iptables-save v1.3.5 on Wed Jul 27 17:54:56 2011
*filter
:INPUT ACCEPT [18:888]
:FORWARD ACCEPT [437:21000]
:OUTPUT ACCEPT [1075:222378]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 81 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
-A RH-Firewall-1-INPUT -s 10.0.0.0/255.255.255.0 -j ACCEPT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 67 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m state --state NEW -m udp --dport 694 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT