#!/bin/bash

[ -x $IPTABLES ] || exit 43

# ----------------------------- filter_out_lan chain -------------------------------

    $IPTABLES -F filter_out_lan
    $IPTABLES -A filter_out_lan -o $LANIF -p all -j ACCEPT

# ------------------------------ filter_in_lan chain -------------------------------

    $IPTABLES -F filter_in_lan

    #$IPTABLES -A filter_in_lan -i $LANIF -j ACCEPT   # LAN
    $IPTABLES -A filter_in_lan -i $LANIF -o $LANIF -j ACCEPT		# Everything inside LAN
    $IPTABLES -A filter_in_lan -i $LANIF -o $VPN_LANIF -j ACCEPT	# Everything LAN-VPN

#    $IPTABLES -A filter_in_lan -i $LANIF -p udp --dport 25 -j ACCEPT

    $IPTABLES -A filter_in_lan -i $LANIF -p udp --dport 53 -j ACCEPT

    $IPTABLES -A filter_in_lan -i $LANIF -p tcp --dport 222 -j ACCEPT
    $IPTABLES -A filter_in_lan -i $LANIF -p tcp --dport 80 -j ACCEPT
    $IPTABLES -A filter_in_lan -i $LANIF -p tcp --dport 443 -j ACCEPT
    $IPTABLES -A filter_in_lan -i $LANIF -p udp --dport 67:68 -j ACCEPT
    #$IPTABLES -A filter_in_lan -i $LANIF -p tcp --dport 8888 -j ACCEPT

    $IPTABLES -A filter_in_lan -i $LANIF -m state --state RELATED,ESTABLISHED -j ACCEPT
    $IPTABLES -A filter_in_lan -i $LANIF -m state --state NEW,INVALID -j DROP
    $IPTABLES -A filter_in_lan -i $LANIF -j DROP

