# Generated by iptables-save v1.3.3 on Thu May 11 13:25:48 2006
*mangle
:PREROUTING ACCEPT [1383:700708]
:INPUT ACCEPT [1382:700380]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1578:194073]
:POSTROUTING ACCEPT [1613:198043]
COMMIT
# Completed on Thu May 11 13:25:48 2006
# Generated by iptables-save v1.3.3 on Thu May 11 13:25:48 2006
*nat
:PREROUTING ACCEPT [9:885]
:POSTROUTING ACCEPT [230:14944]
:OUTPUT ACCEPT [230:14944]
COMMIT
# Completed on Thu May 11 13:25:48 2006
# Generated by iptables-save v1.3.3 on Thu May 11 13:25:48 2006
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:forward_ext - [0:0]
:input_ext - [0:0]
:reject_func - [0:0]
-A INPUT -i lo -j ACCEPT 
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -i eth0 -j input_ext 
-A INPUT -j input_ext 
-A INPUT -m limit --limit 3/min -j LOG --log-prefix "SFW2-IN-ILL-TARGET " --log-tcp-options --log-ip-options 
-A INPUT -j DROP 
-A FORWARD -m limit --limit 3/min -j LOG --log-prefix "SFW2-FWD-ILL-ROUTING " --log-tcp-options --log-ip-options 
-A OUTPUT -o lo -j ACCEPT 
-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT 
-A OUTPUT -m limit --limit 3/min -j LOG --log-prefix "SFW2-OUT-ERROR " --log-tcp-options --log-ip-options 
-A input_ext -p udp -m pkttype --pkt-type broadcast -m udp --dport 137 -j ACCEPT 
-A input_ext -p udp -m pkttype --pkt-type broadcast -m udp --dport 138 -j ACCEPT 
-A input_ext -m pkttype --pkt-type broadcast -j DROP 
-A input_ext -p icmp -m icmp --icmp-type 4 -j ACCEPT 
-A input_ext -p icmp -m icmp --icmp-type 8 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 0 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 3 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 11 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 12 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 14 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 18 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 3/2 -j ACCEPT 
-A input_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type 5 -j ACCEPT 
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 135 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options 
-A input_ext -p tcp -m tcp --dport 135 -j ACCEPT 
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 445 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options 
-A input_ext -p tcp -m tcp --dport 445 -j ACCEPT 
-A input_ext -p tcp -m limit --limit 3/min -m tcp --dport 139 --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-ACC-TCP " --log-tcp-options --log-ip-options 
-A input_ext -p tcp -m tcp --dport 139 -j ACCEPT 
-A input_ext -p udp -m udp --dport 138 -j ACCEPT 
-A input_ext -p udp -m udp --dport 137 -j ACCEPT 
-A input_ext -p tcp -m tcp --dport 113 -m state --state NEW -j reject_func 
-A input_ext -p tcp -m limit --limit 3/min -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options 
-A input_ext -p icmp -m limit --limit 3/min -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options 
-A input_ext -p udp -m limit --limit 3/min -j LOG --log-prefix "SFW2-INext-DROP-DEFLT " --log-tcp-options --log-ip-options 
-A input_ext -m limit --limit 3/min -m state --state INVALID -j LOG --log-prefix "SFW2-INext-DROP-DEFLT-INV " --log-tcp-options --log-ip-options 
-A input_ext -j DROP 
-A reject_func -p tcp -j REJECT --reject-with tcp-reset 
-A reject_func -p udp -j REJECT --reject-with icmp-port-unreachable 
-A reject_func -j REJECT --reject-with icmp-proto-unreachable 
COMMIT
# Completed on Thu May 11 13:25:48 2006
-A custominput -m udp -p udp -m multiport --dports 29900,29901,29902,29903,29904,16567,55125 -j ACCEPT
-A custominput -m tcp -p tcp -m multiport --dports 4711 -j ACCEPT 
-A custominput -m udp -p udp --sport 29910 -s 207.38.8.27 -j ACCEPT
-A custominput -m udp -p udp --sport 29910 -s 207.38.8.28 -j ACCEPT

dave@linux:~> smbpasswd
Old SMB password:
New SMB password:
Retype new SMB password:
machine 127.0.0.1 rejected the (anonymous) password change: Error was : No such user.

Battlefield II Dedicated Server v1.1.2720-552.0(IA-32)
"Dave's Battlefield Gameserver"          Average FPS:  31 [d:0, o:13]
IP: 127.0.0.2 Port: 16567 (LAN)          Map: gulf_of_oman
Game mode: gpm_cq/16                     Mod: bf2
Players: 0/64 (0 r) (0 connecting)       Round: 1/3          Status: [playing]
-------------------------------------------------------------------------------
Loaded 16%
Loaded 17%
Loaded 18%
Loaded 19%
Loaded 20%
Loaded 21%
Loaded 22%
Loaded 23%
Loaded 24%
Loaded 25%
Loaded 26%
Loaded 27%
Loaded 28%
Loaded 29%
Loaded 30%
Loaded 31%
Loaded 100%