Народ подскажите пожалуйста...

У меня правила построены по принципу разрешено все кроме...вот так примерно:

#!/bin/sh                                                                      
IPTABLES=/sbin/iptables                                                    DEPMOD=/sbin/depmod                                                        MODPROBE=/sbin/modprobe                                                        
EXTIF="eth1"                                                            
INTIF="eth0"                                                                    
$DEPMOD -a                                                                      
$MODPROBE ip_tables                                                        $MODPROBE ip_conntrack                                                     $MODPROBE ip_conntrack_ftp                                                 $MODPROBE ip_conntrack_irc                                                 $MODPROBE iptable_nat                                                      $MODPROBE ip_nat_ftp                                                       $MODPROBE ip_nat_irc                                                            
echo "1" > /proc/sys/net/ipv4/ip_forward                                  
echo "1" > /proc/sys/net/ipv4/ip_dynaddr                                        
$IPTABLES -P INPUT ACCEPT                                                  
$IPTABLES -F INPUT                                                        
$IPTABLES -P OUTPUT ACCEPT                                                
$IPTABLES -F OUTPUT                                                        
$IPTABLES -P FORWARD DROP                                                  
$IPTABLES -F FORWARD                                                      
$IPTABLES -t nat -F                                                            

$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -m state --state ESTABLISHED,RELATED -j
$IPTABLES -A FORWARD -i $INTIF -o $EXTIF -j ACCEPT                        
$IPTABLES -A INPUT -i $EXTIF -p udp --dport 137 -j DROP                    
$IPTABLES -A INPUT -i $EXTIF -p tcp --dport 137 -j DROP                    
$IPTABLES -A INPUT -i $EXTIF -p tcp --dport 80 -j DROP                    
$IPTABLES -A FORWARD -j LOG                                                  
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MASQUERADE                        

Каким образом реализовать правило: Запретить все кроме...
Документацию читаю...выстраиваю правила....и не работает ни хрена...

Подскажите синтаксис, чтобы я мог суть понять...

Спасибо.
                                                        

• IPTables, Gennadi, 21:37 , 19-Авг-04, (1)