#!/bin/bash

HOME_NET="192.168.1.0/24"
HOME_IFACE="eth0"
INET_IFACE="eth1"

sysctl -w net.ipv4.ip_forward=1

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP

iptables -A POSTROUTING -s $HOME_NET -o $INET_IFACE -j MASQUERADE
iptables -A POSTROUTING -s $HOME_NET -o $INET_IFACE -j MASQUERADE
iptables -A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -s $HOME_NET -i $HOME_IFACE -j ACCEPT
iptables -A FORWARD -s $HOME_NET -i $HOME_IFACE -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
iptables -A OUTPUT -d $HOME_NET -o $HOME_IFACE -j ACCEPT
iptables -A OUTPUT -o $INET_IFACE -j ACCEPT