*nat
-A POSTROUTING –o eth0 –j MASQUERADE
COMMIT

*filter
-A INPUT –i lo –j ACCEPT
-A INPUT –i eth0 –p tcp –m tcp -–dport 22 –j ACCEPT
-A INPUT –m state -–state RELATED,ESTABLISHED –j ACCEPT
-A INPUT –i eth0 –j DROP
COMMIT