# Forwarding Rules # Use this file to set up network address translation rules # Use tabs or single space to separate # #

# # Action: Required ( ACCEPT | DROP ) # Source Interface: Optional ( interface name, aka eth0 ) # Source Address: Optional ( IP address with optional netmask ) # Destination Interface: Optional ( interface name, aka eth0 ) # Destination Address: Optional ( IP address with optional netmask ) # Bidirectional: Optional ( yes | no, defaults to no if '-' ) # # The next set can be safely left off the end if not desired # Source Port: Optional ( source port number, or range 1:65535 ) # Destination Port: Optional ( destination port number, or range 1:65535 ) # Protocol: Optional, required if port numbers specified ( tcp | udp ) # Syn: Optional, only match (not) syn packets (syn | notsyn ) # State: Optional, set the connection tracking states ( comma separated list ) # # You can use '-' for optional fields #============================================================ #

#ACCEPT eth0 - eth1 - yes #DROP eth1 2002::/64 eth0 2001::/3 no #DROP eth0 2001::/3 eth1 2002:dead:beef::/64 no - 1:1024 tcp syn #ACCEPT eth1 - eth0 - no - - udp - NEW,ESTABLISHED,RELATED