ipt -A fw_hvlan -o $if_inet -p tcp --dport 25 -j REJECT

# enable lan to inet
ipt -A fw_hvlan -o $if_inet -j ACCEPT

# MASQUERADE hvlan to inet
ipt4 -t nat -A post_inet -s $if_hvlan_net4 -o $if_inet -j MASQUERADE
#ipt4 -t nat -A post_inet -s $if_hvlan_net4 -o $if_inet -j SNAT --to $if_inet_ip4

# accept ESTABLISHED from inet to hvlan
ipt -A fw_inet -o $if_hvlan -m state --state RELATED,ESTABLISHED -j ACCEPT