buat contoh kasus, bisa di cek di http://linux-ip.net/html/index.html
ini cuplikannya :

Bikin script seperti ini (contoh) :

#!/bin/bash

IP="/sbin/ip"

# Interface
IF1="eth0"
IF2="eth1"

# IP-Address
ISP1="xxx.xxx.xxx.xxx"
ISP2="xxx.xxx.xxx.xxx"

# Gateway
GW1="xxx.xxx.xxx.xxx"
GW2="xxx.xxx.xxx.xxx"

# IP Network
P_NET1="xxx.xxx.xxx.xxx"
P_NET2="xxx.xxx.xxx.xxx"

# Routing Table
T1="con1"
T2="con2"

# Setup Routing Table ISP1
$IP route add $P_NET1 dev $IF1 src $IP1 table $T1
$IP route add default via $GW1 table $T1

# Setup Routing Table ISP2
$IP route add $P_NET2 dev $IF2 src $IP2 table $T2
$IP route add default via $GW2 table $T2

# Main Routing Table
$IP route add $P_NET1 dev $IF1 src $ISP1
$IP route add $P_NET2 dev $IF2 src $ISP2

# Preference Default Route
$IP route add default via $GW1

# Routing Rules
$IP rule add from $ISP1 table $T1
$IP rule add from $ISP2 table $T2

# Splitting Lokal Network (Jika diperlukan)
# --------------------------------
# $IP rule add from 192.168.1.1 table con1
# $IP rule add from 192.168.1.2 table con2
# and so on...


Simpen di /usr/local/sbin ato wherever lah
Bikin executable scriptnya, trus run (edit /etc/rc.d/rc.local agar scriptnya autorun setiap router dinyalain)

Edit /etc/iproute2/rt_tables
Masukin table con1 ama con2, kira2 seperti ini:

#
# reserved values
#
255 local
254 main
253 default
0 unspec
#
# local
#
#1 inr.ruhep
1 con1
2 con2

Rule iptables nya (sample lagi):
iptables -t nat -A POSTROUTING -p tcp -o eth0 -s 192.168.0.0/24 -d 0/0 --dport 6667 -j SNAT --to ipaliasisp1:6667

iptables -t nat -A POSTROUTING -p tcp -o eth0 -s 192.168.0.0/24 -d 0/0 --dport 80 -j SNAT --to ipaliasisp2:80

edit /etc/rc.d/rc.inet1.conf ,  kasi comment line yg ada GATEWAY "xxx.xxx.xxx.xxx"

liat aja dulu di http://bayuart.worpdress.com

Ini sementara list paket BuLux2006 (Fully Compatible with Mandriva)
rencananya BuLux2006 akan berisi paket berdasar request
dan sementara ini BuLux ada beberapa versi

• BuLux2006 ISP (WebServer,MailServer(qmailtoaster),ISPConfig.dll
• BuLux2006 Gateway/Router
• BuLux2006 Desktop

Daftar Paket Perdana, eh RC-1 .. apa ya maksudnya ?

BuluxLinux2006 MySQL-4.1.12-3mdk.i586
BuluxLinux2006 MySQL-client-4.1.12-3mdk.i586
BuluxLinux2006 MySQL-common-4.1.12-3mdk.i586
BuluxLinux2006 SysVinit-2.86-3mdk.i586
BuluxLinux2006 XFree86-compat-libs-4.1.0-4mdk.i586
BuluxLinux2006 apache-base-2.0.54-13mdk.i586
BuluxLinux2006 apache-conf-2.0.54-12mdk.i586
BuluxLinux2006 apache-mod_auth_mysql-2.0.54_2.9.0-3mdk.i586
BuluxLinux2006 apache-mod_perl-2.0.54_2.0.1-6mdk.i586
BuluxLinux2006 apache-mod_php-2.0.54_5.0.4-4mdk.i586
BuluxLinux2006 apache-mod_ssl-2.0.54-6mdk.i586
BuluxLinux2006 apache-modules-2.0.54-13mdk.i586
BuluxLinux2006 apache-mpm-prefork-2.0.54-13mdk.i586
BuluxLinux2006 ash-0.3.8-8mdk.i586
BuluxLinux2006 aumix-text-2.8-12mdk.i586
BuluxLinux2006 basesystem-10.1-5mdk.i586
BuluxLinux2006 bash-3.0-6mdk.i586
BuluxLinux2006 bind-9.3.1-4mdk.i586
BuluxLinux2006 bind-utils-9.3.1-4mdk.i586
BuluxLinux2006 binutils-2.16.91.0.2-3mdk.i586
BuluxLinux2006 bootloader-utils-1.9-3mdk.i586
BuluxLinux2006 bootsplash-3.1.10-1mdk.i586
BuluxLinux2006 bridge-utils-1.0.6-1mdk.i586
BuluxLinux2006 bzip2-1.0.3-1mdk.i586
BuluxLinux2006 caching-nameserver-9.2-3mdk.noarch
BuluxLinux2006 chkconfig-1.3.20-4mdk.i586
BuluxLinux2006 chkrootkit-0.45-2mdk.i586
BuluxLinux2006 common-licenses-1.0-10mdk.noarch
BuluxLinux2006 console-tools-0.2.3-53mdk.i586
BuluxLinux2006 coreutils-5.2.1-8mdk.i586
BuluxLinux2006 cpio-2.6-5mdk.i586
BuluxLinux2006 cracklib-dicts-2.8.3-1mdk.i586
BuluxLinux2006 crontabs-1.10-5mdk.noarch
BuluxLinux2006 curl-7.14.0-2mdk.i586
BuluxLinux2006 desktop-common-data-2006-2mdk.noarch
BuluxLinux2006 diffutils-2.8.7-2mdk.i586
BuluxLinux2006 dmidecode-2.6-1mdk.i586
BuluxLinux2006 drakxtools-backend-10.3-0.64mdk.i586
BuluxLinux2006 e2fsprogs-1.38-3mdk.i586
BuluxLinux2006 ed-0.2-31mdk.i586
BuluxLinux2006 eject-2.0.13-6mdk.i586
BuluxLinux2006 esound-0.2.36-1mdk.i586
BuluxLinux2006 etcskel-1.63-17mdk.noarch
BuluxLinux2006 ethtool-3-1mdk.i586
BuluxLinux2006 fbgrab-1.0-1mdk.i586
BuluxLinux2006 file-4.14-2mdk.i586
BuluxLinux2006 filesystem-2.1.6-1mdk.i586
BuluxLinux2006 findutils-4.2.24-1mdk.i586
BuluxLinux2006 fontconfig-2.3.2-5mdk.i586
BuluxLinux2006 fortune-mod-1.99.1-5mdk.i586
BuluxLinux2006 freetype-1.3.1-23mdk.i586
BuluxLinux2006 ftp-client-krb5-1.4.2-1mdk.i586
BuluxLinux2006 gawk-3.1.4-1mdk.i586
BuluxLinux2006 gcc2.96-cpp-2.96-0.83mdk.i586
BuluxLinux2006 gettext-base-0.14.5-2mdk.i586
BuluxLinux2006 glibc-2.3.5-5mdk.i586
BuluxLinux2006 glibc-xen-2.3.5-5mdk.i586
BuluxLinux2006 gnupg-1.4.2-2mdk.i586
BuluxLinux2006 grep-2.5.1a-1mdk.i586
BuluxLinux2006 groff-1.19.1-1mdk.i586
BuluxLinux2006 groff-for-man-1.19.1-1mdk.i586
BuluxLinux2006 grub-0.97-13mdk.i586
BuluxLinux2006 gzip-1.2.4a-15mdk.i586
BuluxLinux2006 hdparm-6.1-1mdk.i586
BuluxLinux2006 htb-util-0.2.4-0.3.mdk.i586
BuluxLinux2006 icewm-1.2.23-3mdk.i586
BuluxLinux2006 icewm-light-1.2.23-3mdk.i586
BuluxLinux2006 ifmetric-0.3-3mdk.i586
BuluxLinux2006 ifplugd-0.28-2mdk.i586
BuluxLinux2006 iftop-0.16-2mdk.i586
BuluxLinux2006 imlib-1.9.14-11mdk.i586
BuluxLinux2006 info-install-4.8-1mdk.i586
BuluxLinux2006 initscripts-7.61.1-50mdk.i586
BuluxLinux2006 iplog-2.2.3-9mdk.i586
BuluxLinux2006 iproute2-2.6.10-2mdk.i586
BuluxLinux2006 iptables-1.3.3-3mdk.i586
BuluxLinux2006 iptraf-2.7.0-7mdk.i586
BuluxLinux2006 iputils-20020927-5mdk.i586
BuluxLinux2006 ircd-2.10.3-12mdk.i586
BuluxLinux2006 ircd-hybrid-7.0.3-2mdk.i586
BuluxLinux2006 joe-3.3-2mdk.i586
BuluxLinux2006 kernel-2.6.12.12mdk-1-1mdk.i586
BuluxLinux2006 kernel-enterprise-2.4.28.0.rc1.5mdk-1-1mdk.i586
BuluxLinux2006 kernel-i586-up-1GB-2.6.12.12mdk-1-1mdk.i586
BuluxLinux2006 kernel-smp-2.6.12.12mdk-1-1mdk.i586
BuluxLinux2006 ldconfig-2.3.5-5mdk.i586
BuluxLinux2006 ldetect-lst-0.1.114-1mdk.i586
BuluxLinux2006 less-382-12mdk.i586
BuluxLinux2006 libMesaGL1-5.0.2-11mdk.i586
BuluxLinux2006 libMesaGLU1-5.0.2-11mdk.i586
BuluxLinux2006 libacl1-2.2.31-1mdk.i586
BuluxLinux2006 libapr-util0-0.9.6-8mdk.i586
BuluxLinux2006 libapr0-0.9.6-5mdk.i586
BuluxLinux2006 libatk1.0_0-1.10.1-1mdk.i586
BuluxLinux2006 libattr1-2.4.23-1mdk.i586
BuluxLinux2006 libaudiofile0-0.2.6-3mdk.i586
BuluxLinux2006 libbeecrypt6-3.1.0-5mdk.i586
BuluxLinux2006 libbinutils2-2.16.91.0.2-3mdk.i586
BuluxLinux2006 libbzip2_1-1.0.3-1mdk.i586
BuluxLinux2006 libcairo2-1.0.0-8mdk.i586
BuluxLinux2006 libconsole0-0.2.3-53mdk.i586
BuluxLinux2006 libcrack2-2.8.3-1mdk.i586
BuluxLinux2006 libcurl3-7.14.0-2mdk.i586
BuluxLinux2006 libdaemon0-0.8-1mdk.i586
BuluxLinux2006 libdb4.2-4.2.52-7mdk.i586
BuluxLinux2006 libdevmapper1.01-1.01.00-2mdk.i586
BuluxLinux2006 libelfutils1-0.109-1mdk.i586
BuluxLinux2006 libesound0-0.2.36-1mdk.i586
BuluxLinux2006 libexpat0-1.95.8-1mdk.i586
BuluxLinux2006 libext2fs2-1.38-3mdk.i586
BuluxLinux2006 libfontconfig1-2.3.2-5mdk.i586
BuluxLinux2006 libfreetype6-2.1.10-8mdk.i586
BuluxLinux2006 libftgl0-2.0.11-2mdk.i586
BuluxLinux2006 libgcc1-4.0.1-5mdk.i586
BuluxLinux2006 libgd2-2.0.33-3mdk.i586
BuluxLinux2006 libgdbm3-1.8.3-2mdk.i586
BuluxLinux2006 libgdk_pixbuf2.0_0-2.8.3-4mdk.i586
BuluxLinux2006 libglib1.2-1.2.10-15mdk.i586
BuluxLinux2006 libglib2.0_0-2.8.1-1mdk.i586
BuluxLinux2006 libgpm1-1.20.1-11mdk.i586
BuluxLinux2006 libgtk-linux-fb-2.0_0-2.4.14-5mdk.i586
BuluxLinux2006 libidn11-0.5.18-2mdk.i586
BuluxLinux2006 libimlib1-1.9.14-11mdk.i586
BuluxLinux2006 libintl3-0.14.5-2mdk.i586
BuluxLinux2006 libiw28-28-0.pre6.1mdk.i586
BuluxLinux2006 libjpeg62-6b-37mdk.i586
BuluxLinux2006 libkrb53-1.4.2-1mdk.i586
BuluxLinux2006 libldap2.3_0-2.3.6-4mdk.i586
BuluxLinux2006 libldetect0.6-0.6.3-1mdk.i586
BuluxLinux2006 liblm_sensors3-2.9.1-4mdk.i586
BuluxLinux2006 libmagic1-4.14-2mdk.i586
BuluxLinux2006 libmysql14-4.1.12-3mdk.i586
BuluxLinux2006 libncurses5-5.4-1.20050108.1mdk.i586
BuluxLinux2006 libncursesw5-5.4-1.20050108.1mdk.i586
BuluxLinux2006 libneon0.24-0.24.7-12mdk.i586
BuluxLinux2006 libnet-snmp5-5.2.1.2-4mdk.i586
BuluxLinux2006 libopenssl0.9.7-0.9.7g-2mdk.i586
BuluxLinux2006 libpam0-0.77-31mdk.i586
BuluxLinux2006 libpango1.0_0-1.10.0-3mdk.i586
BuluxLinux2006 libpango1.0_0-modules-1.10.0-3mdk.i586
BuluxLinux2006 libpcap0-0.9.1-1mdk.i586
BuluxLinux2006 libpcre0-6.3-1mdk.i586
BuluxLinux2006 libphp5_common5-5.0.4-9mdk.i586
BuluxLinux2006 libpng3-1.2.8-1mdk.i586
BuluxLinux2006 libpopt0-1.10.2-4mdk.i586
BuluxLinux2006 libpostfix1-2.2.5-7mdk.i586
BuluxLinux2006 libpwdb0-0.62-2mdk.i586
BuluxLinux2006 libpython2.4-2.4.1-3mdk.i586
BuluxLinux2006 libreadline5-5.0-2mdk.i586
BuluxLinux2006 librecode0-3.6-10mdk.i586
BuluxLinux2006 librpm4.4-4.4.2-4mdk.i586
BuluxLinux2006 libsasl2-2.1.22-11mdk.i586
BuluxLinux2006 libselinux1-1.21.11-1mdk.i586
BuluxLinux2006 libslang1-1.4.9-7mdk.i586
BuluxLinux2006 libsqlite3_0-3.2.2-2mdk.i586
BuluxLinux2006 libstdc++6-4.0.1-5mdk.i586
BuluxLinux2006 libsysfs1-1.3.0-1mdk.i586
BuluxLinux2006 libtermcap2-2.0.8-36mdk.i586
BuluxLinux2006 libtiff3-3.6.1-12mdk.i586
BuluxLinux2006 libungif4-4.1.3-1mdk.i586
BuluxLinux2006 libusb0.1_4-0.1.8-7mdk.i586
BuluxLinux2006 libuser-0.53.2-6mdk.i586
BuluxLinux2006 libuser1-0.53.2-6mdk.i586
BuluxLinux2006 libutempter0-0.5.5-1mdk.i586
BuluxLinux2006 libxml2-2.6.21-3mdk.i586
BuluxLinux2006 libxorg-x11-6.9-1.cvs20050915.2mdk.i586
BuluxLinux2006 libxpm4-3.4k-31mdk.i586
BuluxLinux2006 lilo-22.6.1-6mdk.i586
BuluxLinux2006 logrotate-3.7.1-2mdk.i586
BuluxLinux2006 losetup-2.12q-7mdk.i586
BuluxLinux2006 lsof-4.74-1mdk.i586
BuluxLinux2006 lynx-2.8.5-4mdk.i586
BuluxLinux2006 makedev-4.4-1mdk.noarch
BuluxLinux2006 mandriva-release-2006.0-1mdk.i586
BuluxLinux2006 mandriva-theme-1.0.12-1mdk.noarch
BuluxLinux2006 mandriva-theme-screensaver-1.0.12-1mdk.noarch
BuluxLinux2006 mc-4.6.1-1mdk.i586
BuluxLinux2006 mdk-menu-messages-2006-1mdk.i586
BuluxLinux2006 menu-2.1.23-1mdk.i586
BuluxLinux2006 mingetty-1.07-3mdk.i586
BuluxLinux2006 mkinitrd-4.2.17-6mdk.i586
BuluxLinux2006 mktemp-1.5-12mdk.i586
BuluxLinux2006 module-init-tools-3.2-0.pre8.2mdk.i586
BuluxLinux2006 modutils-2.4.26-4mdk.i586
BuluxLinux2006 mount-2.12q-7mdk.i586
BuluxLinux2006 mrtg-2.12.2-2mdk.i586
BuluxLinux2006 msec-0.48-1mdk.i586
BuluxLinux2006 mtr-0.69-2mdk.i586
BuluxLinux2006 multiarch-utils-1.0.9-2mdk.noarch
BuluxLinux2006 mutt-1.5.9i-9mdk.i586
BuluxLinux2006 nail-11.25-1mdk.i586
BuluxLinux2006 ncurses-5.4-1.20050108.1mdk.i586
BuluxLinux2006 net-snmp-5.2.1.2-4mdk.i586
BuluxLinux2006 net-snmp-mibs-5.2.1.2-4mdk.i586
BuluxLinux2006 net-snmp-utils-5.2.1.2-4mdk.i586
BuluxLinux2006 net-tools-1.60-13mdk.i586
BuluxLinux2006 nmap-3.81-1mdk.i586
BuluxLinux2006 openldap-2.3.6-4mdk.i586
BuluxLinux2006 openssh-4.2p1-1mdk.i586
BuluxLinux2006 openssh-clients-4.2p1-1mdk.i586
BuluxLinux2006 openssh-server-4.2p1-1mdk.i586
BuluxLinux2006 openssl-0.9.7g-2mdk.i586
BuluxLinux2006 packdrake-5.0.24-1mdk.i586
BuluxLinux2006 pam-0.77-31mdk.i586
BuluxLinux2006 pango-1.10.0-3mdk.i586
BuluxLinux2006 passwd-0.68-3mdk.i586
BuluxLinux2006 pdksh-5.2.14-17mdk.i586
BuluxLinux2006 perl-5.8.7-3mdk.i586
BuluxLinux2006 perl-Apache-Test-1.26-2mdk.noarch
BuluxLinux2006 perl-Authen-PAM-0.15-2mdk.i586
BuluxLinux2006 perl-Authen-Smb-0.91-6mdk.i586
BuluxLinux2006 perl-BSD-Resource-1.24-3mdk.i586
BuluxLinux2006 perl-CGI-3.08-1mdk.noarch
BuluxLinux2006 perl-Compress-Zlib-1.37-1mdk.i586
BuluxLinux2006 perl-Config-IniFiles-2.38-3mdk.noarch
BuluxLinux2006 perl-DBD-mysql-3.0002-1mdk.i586
BuluxLinux2006 perl-DBI-1.48-1mdk.i586
BuluxLinux2006 perl-Digest-SHA1-2.10-2mdk.i586
BuluxLinux2006 perl-Locale-gettext-1.05-1mdk.i586
BuluxLinux2006 perl-MDK-Common-1.1.24-1mdk.i586
BuluxLinux2006 perl-Module-Build-0.2611-2mdk.noarch
BuluxLinux2006 perl-Net_SSLeay-1.25-4mdk.i586
BuluxLinux2006 perl-URPM-1.27-1mdk.i586
BuluxLinux2006 perl-base-5.8.7-3mdk.i586
BuluxLinux2006 php-ctype-5.0.4-1mdk.i586
BuluxLinux2006 php-ftp-5.0.4-1mdk.i586
BuluxLinux2006 php-gettext-5.0.4-1mdk.i586
BuluxLinux2006 php-ini-5.0.4-4mdk.i586
BuluxLinux2006 php-pcre-5.0.4-1mdk.i586
BuluxLinux2006 php-posix-5.0.4-1mdk.i586
BuluxLinux2006 php-session-5.0.4-1mdk.i586
BuluxLinux2006 php-sysvsem-5.0.4-1mdk.i586
BuluxLinux2006 php-sysvshm-5.0.4-1mdk.i586
BuluxLinux2006 php-tokenizer-5.0.4-1mdk.i586
BuluxLinux2006 php-yp-5.0.4-1mdk.i586
BuluxLinux2006 popt-data-1.10.2-4mdk.i586
BuluxLinux2006 portmap-4.0-24mdk.i586
BuluxLinux2006 portsentry-1.2-1.te.i386
BuluxLinux2006 postfix-2.2.5-7mdk.i586
BuluxLinux2006 postfix-mysql-2.2.5-7mdk.i586
BuluxLinux2006 procps-3.2.5-2mdk.i586
BuluxLinux2006 psmisc-21.5-3mdk.i586
BuluxLinux2006 pwdb-conf-0.62-2mdk.i586
BuluxLinux2006 python-base-2.4.1-3mdk.i586
BuluxLinux2006 rkhunter-1.2.7-2mdk.noarch
BuluxLinux2006 rmt-0.4b40-3mdk.i586
BuluxLinux2006 rootfiles-10.2-2mdk.noarch
BuluxLinux2006 rpm-4.4.2-4mdk.i586
BuluxLinux2006 rpm-helper-0.14-1mdk.noarch
BuluxLinux2006 rpm-mandriva-setup-1.5-1mdk.i586
BuluxLinux2006 rpmtools-5.0.24-1mdk.i586
BuluxLinux2006 sash-3.7-3mdk.i586
BuluxLinux2006 sed-4.1.4-2mdk.i586
BuluxLinux2006 setup-2.7-2mdk.i586
BuluxLinux2006 shadow-utils-4.0.12-1mdk.i586
BuluxLinux2006 shorewall-2.4.1-3mdk.noarch
BuluxLinux2006 sound-scripts-0.35-1mdk.noarch
BuluxLinux2006 soundwrapper-1.3-3mdk.i586
BuluxLinux2006 squid-2.5.STABLE10-10mdk.i586
BuluxLinux2006 sudo-1.6.8p8-2mdk.i586
BuluxLinux2006 sysfsutils-1.3.0-1mdk.i586
BuluxLinux2006 sysklogd-1.4.1-7mdk.i586
BuluxLinux2006 tar-1.15.1-5mdk.i586
BuluxLinux2006 tcp_wrappers-7.6-26mdk.i586
BuluxLinux2006 tcpdump-3.9.3-1mdk.i586
BuluxLinux2006 telnet-client-krb5-1.4.2-1mdk.i586
BuluxLinux2006 termcap-11.0.1-9mdk.noarch
BuluxLinux2006 time-1.7-27mdk.i586
BuluxLinux2006 timezone-2.3.5-5mdk.i586
BuluxLinux2006 udev-068-34mdk.i586
BuluxLinux2006 update-alternatives-1.8.3-2mdk.noarch
BuluxLinux2006 urpmi-4.7.15-1mdk.noarch
BuluxLinux2006 utempter-0.5.5-1mdk.i586
BuluxLinux2006 util-linux-2.12q-7mdk.i586
BuluxLinux2006 vim-minimal-6.3-21mdk.i586
BuluxLinux2006 vixie-cron-3.0.1-57mdk.i586
BuluxLinux2006 webmin-1.220-9mdk.noarch
BuluxLinux2006 wget-1.10-1mdk.i586
BuluxLinux2006 which-2.16-2mdk.i586
BuluxLinux2006 whois-4.7.5-1mdk.i586
BuluxLinux2006 wireless-tools-28-0.pre6.1mdk.i586
BuluxLinux2006 xinetd-2.3.13-2mdk.i586
BuluxLinux2006 xinitrc-2.4.14-1mdk.noarch
BuluxLinux2006 xlockmore-5.19-2mdk.i586
BuluxLinux2006 xorg-x11-6.9-1.cvs20050915.2mdk.i586
BuluxLinux2006 xorg-x11-xauth-6.9-1.cvs20050915.2mdk.i586
BuluxLinux2006 zcip-4-4mdk.i586
BuluxLinux2006 zlib1-1.2.3-1mdk.i586

Dicari sukarelawan yang mau nge-host ISO BuLux2006 !!!!!

yah... lupa lagi :((

padahal cuman gini ae

     /usr/sbin/brctl addbr br0



# Tambahkan ethernet yg dipake

/usr/sbin/brctl addif br0 eth0

/usr/sbin/brctl addif br0 eth1



# buat ethernet on

/sbin/ifconfig eth0 0.0.0.0

/sbin/ifconfig eth1 0.0.0.0



# kasih IP biar si bridge bisa di kontrol dari luar



/sbin/ifconfig br0 62.3.3.26 netmask 255.255.255.248 broadcast 62.3.3.32



# tambah IP internal buat NAT 

ip addr add 192.168.0.1/24 dev br0

/sbin/route add default gw 62.3.3.25

IPTABLES nya

     iptables -F FORWARD

iptables -P FORWARD DROP

iptables -A FORWARD -s 0.0.0.0/0.0.0.0 -d 0.0.0.0/0.0.0.0 -m state --state INVALID -j DROP

iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT



# Limit ICMP 

# iptables -A FORWARD -p icmp -m limit --limit 4/s -j ACCEPT

# Match string, a good simple method to block some VIRUS very Quickly

# iptables -I FORWARD -j DROP -p tcp -s 0.0.0.0/0 -m string --string "cmd.exe"



# Blok koneksi MySQL

iptables -A FORWARD -p tcp -s 0/0 -d 62.3.3.0/24 --dport 3306 -j DROP



# Linux Mail Server

#



# FTP-DATA ( 20 ) , FTP ( 21 ) , SSH ( 22 ) 

iptables -A FORWARD -p tcp -s 0.0.0.0/0 -d 62.3.3.27/32 --dport 20:22 -j ACCEPT



# Ijinkan Mail Server konek ke luar

iptables -A FORWARD -p tcp -s 62.3.3.27/32 -d 0/0 -j ACCEPT



# WWW Server

#



# HTTP ( 80 ) 

iptables -A FORWARD -p tcp -s 0.0.0.0/0 -d 62.3.3.28/32 --dport 80 -j ACCEPT



# HTTPS ( 443 ) 

iptables -A FORWARD -p tcp -s 0.0.0.0/0 -d 62.3.3.28/32 --dport 443 -j ACCEPT



iptables -A FORWARD -p tcp -s 62.3.3.28/32 -d 0/0 -j ACCEPT

sumber:
http://www.linuxsecurity.com/docs/harden-doc/html/securing-debian-howto/ap-bridge-fw.en.html