firewall.sh

#echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -F
iptables -X
 #smaze vsechna pravidla

iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
 #politika firewallu

iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
 #mistni smycka povolena

#iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

iptables -A FORWARD -m state --state=RELATED,ESTABLISHED -j ACCEPT

iptables -I INPUT -p tcp --dport 22 -j ACCEPT

iptables -A INPUT -i ppp0 -j ACCEPT
iptables -A INPUT -i tun0 -j ACCEPT


iptables -A INPUT -j REJECT --reject-with icmp-admin-prohibited