#!/bin/bash

[ -x $IPTABLES ] || exit 43

# ----------------------------- filter_out_lan chain -------------------------------

    $IPTABLES -F filter_out_vpn_gw
    $IPTABLES -A filter_out_vpn_gw -o $VPN_GWIF -p all -j ACCEPT

# ------------------------------ filter_in_lan chain -------------------------------

    $IPTABLES -F filter_in_vpn_gw


    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -o $VPN_GWIF -j ACCEPT	# Everything inside VPN_GWIF
    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -o $INETIF -j ACCEPT	# Everything INET-VPN_GWIF

    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -p tcp --dport 222 -j ACCEPT

    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -p tcp --dport 53 -j ACCEPT
    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -p udp --dport 53 -j ACCEPT

    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -m state --state RELATED,ESTABLISHED -j ACCEPT
    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -m state --state NEW,INVALID -j DROP
    $IPTABLES -A filter_in_vpn_gw -i $VPN_GWIF -j DROP