iptables

# Generated by iptables-save v1.4.7 on Tue Jul 19 11:59:13 2016
*filter
:INPUT DROP [18:775]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [5065:381835]
-A INPUT -i lo -j ACCEPT 
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT 
#-A INPUT -p tcp --dport 80 -m state --state NEW -m recent --name WEBPOOL --rcheck --seconds 120 --hitcount 5 -j DROP
#-A INPUT -p tcp --dport 80 -m state --state NEW -m recent --name WEBPOOL --set -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 16890 -j ACCEPT 
-A INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j DROP
-A INPUT -s 103.20.192.243/32 -j ACCEPT 
-A INPUT -s 10.162.77.205/32 -j ACCEPT 
-A FORWARD -s 60.173.251.191/32 -j ACCEPT 
-A FORWARD -s 114.215.169.231/32 -j ACCEPT 
-A FORWARD -s 61.190.89.138/32 -j ACCEPT 
COMMIT
# Completed on Tue Jul 19 11:59:13 2016
# Generated by iptables-save v1.4.7 on Tue Jul 19 11:59:13 2016
*nat
:PREROUTING ACCEPT [2:80]
:POSTROUTING ACCEPT [25:1500]
:OUTPUT ACCEPT [47:2820]
-A PREROUTING  -s 60.173.251.191 -d 114.215.169.231/32 -p tcp -m tcp --dport 20:21  -j DNAT --to-destination 10.161.177.219 
-A PREROUTING  -s 60.173.251.191 -d 114.215.169.231/32 -p tcp -m tcp --dport 20000:30000 -j DNAT --to-destination 10.161.177.219 
-A POSTROUTING -s 60.173.251.191 -d 10.161.177.219/32 -j SNAT --to-source 10.162.81.52 
-A PREROUTING  -s 61.190.89.138 -d 114.215.169.231/32 -p tcp -m tcp --dport 20:21  -j DNAT --to-destination 10.161.177.219 
-A PREROUTING  -s 61.190.89.138 -d 114.215.169.231/32 -p tcp -m tcp --dport 20000:30000 -j DNAT --to-destination 10.161.177.219 
-A POSTROUTING -s 61.190.89.138 -d 10.161.177.219/32 -j SNAT --to-source 10.162.81.52 
COMMIT
# Completed on Tue Jul 19 11:59:13 2016