# Generated by iptables-save v1.4.7 on Tue Aug  7 11:01:40 2012
*nat
:PREROUTING ACCEPT [329:32530]
:POSTROUTING ACCEPT [11:795]
:OUTPUT ACCEPT [11:795]
COMMIT
# Completed on Tue Aug  7 11:01:40 2012
# Generated by iptables-save v1.4.7 on Tue Aug  7 11:01:40 2012
*filter
:INPUT DROP [126:62179]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [207:13856]
-A INPUT -d 222.XXX.250.128/25 -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT 
-A INPUT -d 222.XXX.250.128/25 -p udp -j ACCEPT 
-A INPUT -p icmp -m limit --limit 1/sec --limit-burst 10 -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT 
-A INPUT -s 192.168.25.0/24 -d 192.168.25.178/32 -i em2 -p tcp -m tcp --dport 22 -j ACCEPT 
-A INPUT -s 222.XXX.250.128/25 -i em1 -p vrrp -j ACCEPT 
-A INPUT -s 192.168.25.0/24 -d 192.168.25.178/32 -i em2 -j ACCEPT 
#-A FORWARD -s 192.168.25.0/24 -i em2 -p tcp -j ACCEPT 
#-A FORWARD -d 192.168.25.0/24 -i em1 -p tcp -m tcp --sport 20 -j ACCEPT 
#-A FORWARD -d 192.168.25.0/24 -i em1 -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -j ACCEPT 
#-A FORWARD -d 192.168.25.0/24 -i em1 -p udp -j ACCEPT 
COMMIT
# Completed on Tue Aug  7 11:01:40 2012