# /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)

# The loopback interface
auto lo
iface lo inet loopback

# The first network card - this entry was created during the Debian installation
# (network, broadcast and gateway are optional)
auto eth0
iface eth0 inet static
	address 192.168.0.8
	netmask 255.255.255.0
	network 192.168.0.0
	broadcast 192.168.0.255
	gateway 192.168.0.145
#	dns-nameservers 218.176.253.65 218.176.253.97
#	dns-nameservers 192.168.0.145

pre-up echo 1 > /proc/sys/net/ipv4/ip_forward
pre-up iptables -F
pre-up iptables -P INPUT DROP
pre-up iptables -P FORWARD DROP
pre-up iptables -P OUTPUT DROP

# INPUT Accept
pre-up iptables -A INPUT -i lo -j ACCEPT
#pre-up iptables -A INPUT -s 192.168.0.0/24 -j ACCEPT
pre-up iptables -A INPUT -p tcp -i eth0 --dport 80 -j ACCEPT
pre-up iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
pre-up iptables -A INPUT -p tcp -i eth0 -s 192.168.0.0/24 --dport 22 -j ACCEPT      # OpenSSH
pre-up iptables -A INPUT -p udp -i eth0 -s 192.168.0.0/24 --dport 137 -j ACCEPT #Samba
pre-up iptables -A INPUT -p udp -i eth0 -s 192.168.0.0/24 --dport 138 -j ACCEPT #Samba
pre-up iptables -A INPUT -p tcp -i eth0 -m state --state NEW -s 192.168.0.0/24 --dport 139 -j ACCEPT #Samba
pre-up iptables -A INPUT -p tcp -i eth0 -m state --state NEW -s 192.168.0.0/24 --sport 445 -j ACCEPT #Samba
pre-up iptables -A INPUT -p udp -i eth0 -s XXX.XXX.XXX.XXX --dport 53 -j ACCEPT # MY DNS SERVER


# OUTPUT Chain
pre-up iptables -A OUTPUT -o lo -j ACCEPT
#pre-up iptables -A OUTPUT -d 192.168.0.0/24 -j ACCEPT
pre-up iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
#pre-up iptables -A OUTPUT -p tcp -o eth0 --sport 80 -j ACCEPT
pre-up iptables -A OUTPUT -p tcp -o eth0 -d 192.168.0.0/24 --sport 22 -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o eth0 -d 192.168.0.0/24 --sport 137 -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o eth0 -d 192.168.0.0/24 --sport 138 -j ACCEPT
pre-up iptables -A OUTPUT -p tcp -o eth0 -d 192.168.0.0/24 --sport 139 -j ACCEPT
pre-up iptables -A OUTPUT -p tcp -o eth0 -d 192.168.0.0/24 --dport 445 -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o eth0 -d XXX.XXX.XXX.XXX --dport 53 -j ACCEPT # MY DNS SERVER