iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

iptables -t filter -A INPUT -i eth1 -j ACCEPT
iptables -t filter -A INPUT -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -t filter -A INPUT -s 3.221.199.53/32 -j ACCEPT
iptables -t filter -A INPUT -s 45.25.189.90/32 -j ACCEPT
iptables -t filter -A INPUT -s 18.218.161.156/32 -j ACCEPT
iptables -t filter -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t filter -A FORWARD -j ACCEPT


iptables -t nat -A POSTROUTING -o eth0 -m policy --dir out --pol ipsec -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 172.25.1.0/24 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 172.25.1.0/24 -o eth0 -j MASQUERADE