#!/bin/bash

[ -x $IPTABLES ] || exit 43

# ----------------------------- filter_out_vpn_cl chain -------------------------------

    $IPTABLES -F filter_out_vpn_cl
    $IPTABLES -A filter_out_vpn_cl -o $VPN_CLIF -p all -j ACCEPT

# ------------------------------ filter_in_lan chain -------------------------------

    $IPTABLES -F filter_in_vpn_cl

    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -o $VPN_CLIF -j ACCEPT

    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -p tcp --dport 3306 -j ACCEPT
    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -p tcp --dport 34000 -j ACCEPT
    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -p tcp --dport 80 -j ACCEPT

    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -m state --state RELATED,ESTABLISHED -j ACCEPT
    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -m state --state NEW,INVALID -j DROP
    $IPTABLES -A filter_in_vpn_cl -i $VPN_CLIF -j DROP