#!/bin/bash

echo "Flushing iptables..."
iptables -F

echo "SSH Allowed"
iptables -A INPUT -p tcp --dport 22 -j ACCEPT

echo "allow from localhost"
iptables -A INPUT -i lo -j ACCEPT

echo "allow from 192.168.1.1-100"
iptables -I INPUT 3 -i eth0 -m iprange --src-range 192.168.1.1-192.168.1.100 -j ACCEPT

echo "allow all pings"
iptables -I INPUT 5 -p icmp -j ACCEPT

# Set default policies for INPUT, FORWARD and OUTPUT chains
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

# Accept packets belonging to established and related connections
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT