#!/bin/sh
nic #
 iptables -t nat -F
nic #
 iptables -F
nic #
 # NAT
nic #
 #iptables -t nat -A POSTROUTING --source 192.1.3.0/24 --destination 0.0.0.0/0 -j SNAT --to-source 192.1.2.254
nic #
 # make sure that we never acidentially let ESP through.
nic #
 #ptables -N LOGDROP
nic #
 #ptables -A LOGDROP -j LOG
nic #
 #ptables -A LOGDROP -j DROP
nic #
 #ptables -I FORWARD 1 --proto 50 -j LOGDROP
nic #
 #ptables -I FORWARD 2 --destination 192.0.2.0/24 -j LOGDROP
nic #
 #ptables -I FORWARD 3 --source 192.0.2.0/24 -j LOGDROP
nic #
 # route
nic #
 #ptables -I INPUT 1 --destination 192.0.2.0/24 -j LOGDROP
nic #
 # Display the table, so we know it is correct.
nic #
 #ptables -t nat -L -n
nic #
 #ptables -L -n
nic #
 echo done.
done.