# /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)

# The loopback interface
auto lo
iface lo inet loopback

# The first network card - this entry was created during the Debian installation
# (network, broadcast and gateway are optional)
auto p2p1
iface p2p1 inet static
	address 192.168.0.8
	netmask 255.255.255.0
	network 192.168.0.0
	broadcast 192.168.0.255
	gateway 192.168.0.145
	dns-nameservers 218.176.253.65 218.176.253.97
	dns-search localdomain

# The secondary network interface
#auto wlan0
#iface wlan0 inet static
#	address 192.168.0.9
#	netmask 255.255.255.0
#	network 192.168.0.0
#	broadcast 192.168.0.255
#	gateway 192.168.0.145
#	dns-nameservers 218.176.253.65 218.176.253.97
#	dns-search localdomain
#	wpa-conf /etc/wpa_supplicant/kapiwireless.conf

pre-up iptables -F
pre-up iptables -P INPUT DROP
pre-up iptables -P FORWARD DROP
pre-up iptables -P OUTPUT DROP

#####  INPUT Chain #####
# loopback
pre-up iptables -A INPUT -i lo -j ACCEPT

# Common
pre-up iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
pre-up iptables -A INPUT -p udp -i p2p1 -s 218.176.253.65 --dport 53 -j ACCEPT
pre-up iptables -A INPUT -p udp -i p2p1 -s 218.176.253.97 --dport 53 -j ACCEPT

# OpenSSH
pre-up iptables -A INPUT -p tcp -i p2p1 -s 192.168.0.0/24 --dport 22 -j ACCEPT

# Samba
pre-up iptables -A INPUT -p udp -i p2p1 -s 192.168.0.0/24 --dport 137 -j ACCEPT
pre-up iptables -A INPUT -p udp -i p2p1 -s 192.168.0.0/24 --dport 138 -j ACCEPT
pre-up iptables -A INPUT -p tcp -i p2p1 -m state --state NEW -s 192.168.0.0/24 --dport 139 -j ACCEPT
pre-up iptables -A INPUT -p tcp -i p2p1 -m state --state NEW -s 192.168.0.0/24 --sport 445 -j ACCEPT

# Apache
pre-up iptables -A INPUT -p tcp -i p2p1 --dport 80 -j ACCEPT

#####  OUTPUT Chain #####
# loopback
pre-up iptables -A OUTPUT -o lo -j ACCEPT

# Common
pre-up iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o p2p1 -d 218.176.253.97 --dport 53 -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o p2p1 -d 218.176.253.65 --dport 53 -j ACCEPT

# OpenSSH
pre-up iptables -A OUTPUT -p tcp -o p2p1 -d 192.168.0.0/24 --sport 22 -j ACCEPT

# Samba
pre-up iptables -A OUTPUT -p udp -o p2p1 -d 192.168.0.0/24 --sport 137 -j ACCEPT
pre-up iptables -A OUTPUT -p udp -o p2p1 -d 192.168.0.0/24 --sport 138 -j ACCEPT
pre-up iptables -A OUTPUT -p tcp -o p2p1 -d 192.168.0.0/24 --sport 139 -j ACCEPT
pre-up iptables -A OUTPUT -p tcp -o p2p1 -d 192.168.0.0/24 --dport 445 -j ACCEPT

# apt-get
pre-up iptables -A OUTPUT -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT

# ntp
pre-up iptables -A OUTPUT -p udp -o p2p1 -m state --state NEW --dport 123 -j ACCEPT