# Generated by iptables-save v1.4.4 on Sun Apr 8 13:58:15 2012
*mangle
:PREROUTING ACCEPT [15110:3597713]
:INPUT ACCEPT [4015:689656]
:FORWARD ACCEPT [10538:2855605]
:OUTPUT ACCEPT [12374:1052019]
:POSTROUTING ACCEPT [22941:3912059]
COMMIT
# Completed on Sun Apr 8 13:58:15 2012
# Generated by iptables-save v1.4.4 on Sun Apr 8 13:58:15 2012
*nat
:PREROUTING ACCEPT [2252:183531]
:POSTROUTING ACCEPT [12:1798]
:OUTPUT ACCEPT [4946:440981]
[6644:569427] -A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Sun Apr 8 13:58:15 2012
# Generated by iptables-save v1.4.4 on Sun Apr 8 13:58:15 2012
*filter
:INPUT ACCEPT [32:2065]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [12374:1052019]
[11:1334] -A INPUT -i lo -j ACCEPT
[3863:666794] -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
[109:19463] -A INPUT ! -i eth0 -m state --state NEW -j ACCEPT
[0:0] -A FORWARD -i eth2 -o eth1 -j DROP
[4184:1675399] -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
[6342:1178844] -A FORWARD -i eth1 -o eth0 -j ACCEPT
[6:976] -A FORWARD -i eth0 -o eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT
[6:386] -A FORWARD -i eth2 -o eth0 -j ACCEPT
[0:0] -A FORWARD -i eth0 -o eth0 -j REJECT --reject-with icmp-port-unreachable
[0:0] -A FORWARD -i eth1 -o eth1 -j REJECT --reject-with icmp-port-unreachable
[0:0] -A FORWARD -i eth2 -o eth2 -j REJECT --reject-with icmp-port-unreachable
COMMIT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -m state --state NEW -i ! $INET -j ACCEPT
12:46:15.417765 a0:88:b4:97:10:b8 > 00:0f:ea:51:5d:29, ethertype IPv4 (0x0800), length 74: 192.168.10.101 > 192.168.1.1: ICMP echo request, id 1, seq 14974, length 40
12:46:15.417812 00:0f:ea:51:5d:29 > a0:88:b4:97:10:b8, ethertype IPv4 (0x0800), length 74: 192.168.1.1 > 192.168.10.101: ICMP echo reply, id 1, seq 14974, length 40