iptables_example.rules

*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT ! -d <my_ssh_server_IP>/32 -o eth0 -p tcp -m tcp -j REDIRECT --to-ports 10080
-A OUTPUT -o eth0 -p udp -m udp --dport 53 -j REDIRECT --to-ports 1053
COMMIT

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT DROP [0:0]
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o eth0 -p tcp -d 127.0.0.1/32 -j ACCEPT
-A OUTPUT -o eth0 -p tcp -d <my_ssh_server_IP>/32 -j ACCEPT
-A OUTPUT -o eth0 -d 127.0.0.1/32 -p udp -m udp --dport 1053 -j ACCEPT
COMMIT