Firewall rules for iptables with ssh and OpenVPN forwarding.

firewall-ssh-openvpn.sh

sudo iptables -F
sudo iptables -I INPUT 1 -i tun0 -j ACCEPT
sudo iptables -I INPUT 1 -i lo -j ACCEPT
sudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
sudo iptables -A INPUT -j DROP
sudo iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT 
sudo iptables -A FORWARD -i tun0 -j ACCEPT
iptables -A POSTROUTING -s 10.201.1.0/24 -o eth0 -j MASQUERADE