[root@ptv etc]# cat ./sysconfig/iptables
# Generated by iptables-save v1.4.7 on Sun Feb 24 10:36:02 2013
*mangle
:PREROUTING ACCEPT [1140973:990739744]
:INPUT ACCEPT [6235:434787]
:FORWARD ACCEPT [1134282:990269562]
:OUTPUT ACCEPT [2218:187172]
:POSTROUTING ACCEPT [1136426:990450812]
COMMIT

# Completed on Sun Feb 24 10:36:02 2013
# Generated by iptables-save v1.4.7 on Sun Feb 24 10:36:02 2013


*nat
:PREROUTING ACCEPT [11133:787699]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

-A POSTROUTING -s 192.168.1.0/24 -j SNAT --to-source 8x.x.x.x




COMMIT


# Completed on Sun Feb 24 10:36:02 2013
# Generated by iptables-save v1.4.7 on Sun Feb 24 10:36:02 2013

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:FW-ptv-INPUT - [0:0]
-A INPUT -j FW-ptv-INPUT
-A FORWARD -j FW-ptv-INPUT
-A FW-ptv-INPUT -i lo -j ACCEPT
#-A FW-ptv-INPUT -p icmp --icmp-type any -j ACCEPT
-A FW-ptv-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A FW-ptv-INPUT -i eth1 -j ACCEPT
-A FW-ptv-INPUT -o eth1 -j ACCEPT
#DNS open port
-A FW-ptv-INPUT -m tcp -p tcp --dport 53 -j ACCEPT
-A FW-ptv-INPUT -m udp -p udp --dport 53 -j ACCEPT
#http https
-A FW-ptv-INPUT -m tcp -p tcp --dport 80 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 443 -j ACCEPT
#teamviewere
-A FW-ptv-INPUT -m tcp -p tcp --dport 5938 -j ACCEPT
-A FW-ptv-INPUT -m udp -p udp --dport 5938 -j ACCEPT
#ipcamera
-A FW-ptv-INPUT -m tcp -p tcp --dport 8085 -j ACCEPT
#mail
-A FW-ptv-INPUT -m tcp -p tcp --dport 25 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 110 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 587 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 465 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 143 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 995 -j ACCEPT
#FTP
-A FW-ptv-INPUT -m tcp -p tcp --dport 21 -j ACCEPT

#klient bank privat 3264
-A FW-ptv-INPUT -m tcp -p tcp --dport 3264 -j ACCEPT

#WOWZA MEDIA SERVER
-A FW-ptv-INPUT -m udp -p udp --dport 10012:10015 -j ACCEPT
-A FW-ptv-INPUT -m udp -p udp --dport 2007 -j ACCEPT
-A FW-ptv-INPUT -m tcp -p tcp --dport 3346 -j ACCEPT

#-A FW-ptv-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FW-ptv-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A FW-ptv-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
#-A FW-ptv-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT