while [ ! -e /dev/net/tun ]

do

  sleep 1

done



iptables -A INPUT -p tcp -m multiport --dports 20,21,22,80,443 -i tun+ -j DROP

iptables -A FORWARD -i tun+ -d 192.168.0.0/16 -j DROP

iptables -A INPUT -i vlan2 -m state --state NEW -p udp --dport $vpnU1194 -j ACCEPT

iptables -A INPUT -i vlan2 -m state --state NEW -p tcp --dport $vpnT443 -j ACCEPT

iptables -A INPUT -i tun+ -j ACCEPT

iptables -A FORWARD -i tun+ -j ACCEPT

iptables -A FORWARD -i tun+ -o vlan2 -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A FORWARD -i vlan2 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -o tun+ -j ACCEPT