iptables with one lan

#network interface = eth1
#ip = 124.158.x.y

*nat
:PREROUTING ACCEPT [2019:90539]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT

*mangle
:PREROUTING ACCEPT [2409:119935]
:INPUT ACCEPT [2403:119605]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [333:137510]
:POSTROUTING ACCEPT [333:137510]
COMMIT

*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
:INBOUND - [0:0]
:LOG_FILTER - [0:0]
:LSI - [0:0]
:LSO - [0:0]
:OUTBOUND - [0:0]

-A INPUT -p icmp -m limit --limit 10/sec -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -j INBOUND

-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth1 -j OUTBOUND

-A INBOUND -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INBOUND -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT

-A INBOUND -p tcp -m tcp --dport 10000 -j ACCEPT
-A INBOUND -p udp -m udp --dport 10000 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 22 -j ACCEPT
-A INBOUND -p udp -m udp --dport 22 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 3306 -j ACCEPT
-A INBOUND -p udp -m udp --dport 3306 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 80 -j ACCEPT
-A INBOUND -p udp -m udp --dport 80 -j ACCEPT

-A INBOUND -p tcp -m tcp --dport 25 -j ACCEPT
-A INBOUND -p udp -m udp --dport 25 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 110 -j ACCEPT
-A INBOUND -p udp -m udp --dport 110 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 143 -j ACCEPT
-A INBOUND -p udp -m udp --dport 143 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 993 -j ACCEPT
-A INBOUND -p udp -m udp --dport 993 -j ACCEPT
-A INBOUND -p tcp -m tcp --dport 995 -j ACCEPT
-A INBOUND -p udp -m udp --dport 995 -j ACCEPT

-A INBOUND -j LSI

-A LSI -p icmp -m icmp --icmp-type 8 -j DROP
-A LSI -j DROP

-A OUTBOUND -p icmp -j ACCEPT
-A OUTBOUND -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTBOUND -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTBOUND -j ACCEPT

-A LSO -j REJECT --reject-with icmp-port-unreachable
COMMIT