#!/bin/sh

echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6

#--- all outgoing
iptables -A INPUT -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i ppp0 -j DROP

#--- psg and ruhome ssh
iptables -I INPUT -i ppp0 -p tcp -m tcp -s 80.121.220.30 --dport 22 -j ACCEPT
iptables -I INPUT -i ppp0 -p tcp -m tcp -s 194.25.153.12 --dport 22 -j ACCEPT
# openvpn from everywhere
iptables -I INPUT -i ppp0 -p udp -m udp --dport 1194 -j ACCEPT

