*filter
:INPUT DROP [28071:9496991]
:FORWARD DROP [1:344]
UTPUT ACCEPT [7379811:8382372915]
-A INPUT -m state –state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -s 10.1.1.0/255.255.255.0 -j ACCEPT
-A FORWARD -s 10.1.1.0/255.255.255.0 -j ACCEPT
-A FORWARD -d 10.1.1.0/255.255.255.0 -m state –state RELATED,ESTABLISHED -j ACCEPT
COMMIT
*nat
REROUTING ACCEPT [68559:12291604]
OSTROUTING ACCEPT [3108:247318]
UTPUT ACCEPT [17577:1164789]
-A PREROUTING -i eth0 -s 10.1.1.10 -p tcp -m tcp –dport 80 -j REDIRECT –to-ports 3128
-A POSTROUTING -o eth1 -j MASQUERADE
COMMIT
