export ppp0ADDR=`ifconfig ppp0 | grep 'inet addr' | awk '{print $2}' | sed -e 's/.*://'`
/sbin/ipchains -A input   -i eth0 -p tcp       -s 172.16.0.0/16 1024:65535 -d 0/0 smtp -j ACCEPT                       # smtp/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 smtp -j ACCEPT                      # smtp/tcp (O) DynamicIP
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 finger -j ACCEPT                    # finger/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 finger -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                    # finger/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 domain -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 domain -d localhost/32 1024:65535 -j ACCEPT             # domain/udp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 auth -j ACCEPT               # auth/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 auth -j ACCEPT               # auth/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 auth -d localhost/32 1024:65535 -j ACCEPT               # auth/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 auth -d localhost/32 1024:65535 -j ACCEPT               # auth/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p udp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 domain -j ACCEPT                    # domain/udp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p udp       -s 0/0 domain -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                    # domain/udp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p udp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 domain -j ACCEPT                    # domain/udp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp       -s 0/0 1024:65535 -d ${ppp0ADDR}/32 auth -j ACCEPT                      # auth/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp  ! -y -s ${ppp0ADDR}/32 auth -d 0/0 1024:65535 -j ACCEPT                      # auth/tcp (O) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 xfs -d localhost/32 1024:65535 -j ACCEPT                # xfs/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 xfs -d localhost/32 1024:65535 -j ACCEPT                # xfs/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 xfs -j ACCEPT                # xfs/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 xfs -j ACCEPT                # xfs/tcp (I)
/sbin/ipchains -A input   -i ppp0 -p tcp       -s 0/0 1024:65535 -d ${ppp0ADDR}/32 auth -j ACCEPT                      # auth/tcp (I) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p udp       -s 0/0 domain -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                    # domain/udp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p udp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 domain -j ACCEPT                    # domain/udp (O) DynamicIP
/sbin/ipchains -A output  -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 biff -j ACCEPT               # biff/udp (O)
/sbin/ipchains -A input   -i lo   -p udp       -s localhost/32 1024:65535 -d localhost/32 biff -j ACCEPT               # biff/udp (I)
/sbin/ipchains -A output  -i lo   -p icmp      -s localhost/32 3 -d localhost/32 3 -j ACCEPT                           # Dest Unreach/icmp(O)
/sbin/ipchains -A input   -i lo   -p icmp      -s localhost/32 3 -d localhost/32 3 -j ACCEPT                           # Dest Unreach/icmp(I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 smtp -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 smtp -d localhost/32 1024:65535 -j ACCEPT               # smtp/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 pop-3 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                     # pop-3/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 ftp -j ACCEPT                       # ftp/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 ftp -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                       # ftp/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 171.65.16.124/32 1024:65535 -j ACCEPT   # (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp       -s 171.65.16.124/32 1024:65535 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT   # (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 xfs -d localhost/32 1024:65535 -j ACCEPT                # xfs/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 xfs -d localhost/32 1024:65535 -j ACCEPT                # xfs/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 xfs -j ACCEPT                # xfs/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 xfs -j ACCEPT                # xfs/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 ftp -j ACCEPT                       # ftp/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 ftp -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                       # ftp/tcp (I) DynamicIP
/sbin/ipchains -A input   -i eth0 -p udp       -s 172.16.0.0/16 1024:65535 -d 0/0 domain -j ACCEPT                     # domain/udp (I)
/sbin/ipchains -A input   -i eth0 -p tcp       -s 172.16.0.0/16 1024:65535 -d 0/0 rc5des -j ACCEPT                     # rc5des/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 rc5des -j ACCEPT                    # rc5des/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 rc5des -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                    # rc5des/tcp (I) DynamicIP
/sbin/ipchains -A output  -i eth0 -p tcp  ! -y -s 0/0 rc5des -d 172.16.0.0/16 1024:65535 -j ACCEPT                     # rc5des/tcp (O)
/sbin/ipchains -A output  -i eth0 -p udp       -s 0/0 domain -d 172.16.0.0/16 1024:65535 -j ACCEPT                     # domain/udp (O)
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 http -j ACCEPT                      # http/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 http -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                      # http/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 http -j ACCEPT                      # http/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 http -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                      # http/tcp (I) DynamicIP
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 squid -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (O)
/sbin/ipchains -A input   -i lo   -p tcp  ! -y -s localhost/32 squid -d localhost/32 1024:65535 -j ACCEPT              # squid/tcp (I)
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 http -j ACCEPT                      # http/tcp (O) DynamicIP
export ppp0ADDR=`ifconfig ppp0 | grep 'inet addr' | awk '{print $2}' | sed -e 's/.*://'`
/sbin/ipchains -A output  -i sl0  -p udp       -s 0.0.0.0/32 1024:65535 -d 0/0 domain -j ACCEPT                        # domain/udp (O)
/sbin/ipchains -A output  -i sl0  -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 smtp -j ACCEPT                      # smtp/tcp (O) DynamicIP
/sbin/ipchains -A output  -i sl0  -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                     # pop-3/tcp (O) DynamicIP
/sbin/ipchains -A output  -i sl0  -p tcp       -s 0.0.0.0/32 1024:65535 -d 0/0 pop-3 -j ACCEPT                         # pop-3/tcp (O)
/sbin/ipchains -A output  -i sl0  -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 0/0 ftp -j ACCEPT                       # ftp/tcp (O) DynamicIP
/sbin/ipchains -A input   -i eth0 -p udp       -s 172.16.0.0/16 netbios-dgm -d 172.16.255.255/32 netbios-dgm -j ACCEPT # netbios-dgm/udp (I)
/sbin/ipchains -A input   -i eth0 -p icmp      -s 172.16.0.0/16 3 -d 172.16.0.253/32 3 -j ACCEPT                       # Dest Unreach/icmp(I)
/sbin/ipchains -A output  -i sl0  -p tcp       -s 0.0.0.0/32 1024:65535 -d 0/0 domain -j ACCEPT                        # domain/tcp (O)
export ppp0ADDR=`ifconfig ppp0 | grep 'inet addr' | awk '{print $2}' | sed -e 's/.*://'`
/sbin/ipchains -A output  -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 1024:65535 -j ACCEPT         # (O)
/sbin/ipchains -A input   -i lo   -p tcp       -s localhost/32 1024:65535 -d localhost/32 1024:65535 -j ACCEPT         # (I)
/sbin/ipchains -A output  -i ppp0 -p icmp      -s ${ppp0ADDR}/32 3 -d 0/0 3 -j ACCEPT                                  # Dest Unreach/icmp(O) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 164.11.100.4/32 1024:65535 -j ACCEPT    # (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp       -s 164.11.100.4/32 1024:65535 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT    # (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1023 -d 0/0 ssh -j ACCEPT                             # 1023/tcp ssh/tcp (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 ssh -d ${ppp0ADDR}/32 1023 -j ACCEPT                             # ssh/tcp 1023/tcp (I) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp  ! -y -s 0/0 smtp -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT                      # smtp/tcp (I) DynamicIP
/sbin/ipchains -A output  -i ppp0 -p tcp       -s ${ppp0ADDR}/32 1024:65535 -d 209.197.113.244/32 1024:65535 -j ACCEPT # (O) DynamicIP
/sbin/ipchains -A input   -i ppp0 -p tcp       -s 209.197.113.244/32 1024:65535 -d ${ppp0ADDR}/32 1024:65535 -j ACCEPT # (I) DynamicIP
