iptables -I FORWARD -i eth0 -j DROP iptables -I FORWARD -m state --state RELATED,ESTABLISHED -i eth0 -j ACCEPT iptables -I FORWARD -i eth1 -p tcp -dport 935 -j DROP iptables -I FORWARD -i eth1 -p tcp -s 192.168.0.2 --dport 935 -j ACCEPT