*mangle

COMMIT

*nat
# LAN K15 NAT:

# dreambox:
-A POSTROUTING -s 192.168.15.254 -j SNAT --to-source 10.102.208.133
-A POSTROUTING -s 192.168.15.252 -j SNAT --to-source 10.102.208.133
-A PREROUTING -d 10.102.208.133 -p udp --dport 30038 -j DNAT --to-destination 192.168.15.254
-A PREROUTING -d 10.102.208.133 -p udp --dport 30051 -j DNAT --to-destination 192.168.15.252

-A POSTROUTING -s 192.168.15.128/25 -j SNAT --to-source 10.102.208.130

COMMIT

*filter
# LAN K15 Firewall:
-A FORWARD -s 192.168.15.0/25 -j DROP

#potlaceni UPnP multicastu, aby nebudil zabaka:
-A FORWARD -d 239.255.255.250 -p udp --dport 1900 -j DROP

COMMIT
