#!/bin/bash

[ -x $IPTABLES ] || exit 43

# ----------------------------- filter out chain -------------------------------

    $IPTABLES -F filter_out_loop

# smtps, submission, amavis etc
    $IPTABLES -A filter_out_loop -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --dport 465 -m owner --uid-owner 33 -j DROP
    $IPTABLES -A filter_out_loop -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --dport 587 -m owner --uid-owner 33 -j DROP
    $IPTABLES -A filter_out_loop -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --dport 10024:10027 -m owner --uid-owner 33 -j DROP

# allow ALL output to loopback
    $IPTABLES -A filter_out_loop -o lo -p all -j ACCEPT 

# ----------------------------- filter in chain --------------------------------

    $IPTABLES -F filter_in_loop
    $IPTABLES -A filter_in_loop -i lo -p all -j ACCEPT
