#!/bin/bash iptables -t nat -I PREROUTING -i tun0 -p udp --dport 5000:5300 -j DNAT --to-destination 192.168.1.10 iptables -I INPUT -p tcp --dport 22 -j logaccept iptables -I INPUT -p tcp --dport 443 -j logaccept