iptables там простой и не заморочный, куча пробросов внутрь и все правила в ACCEPT
# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
ACCEPT udp -- anywhere anywhere udp dpt:25
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere admin2.xxx.ru tcp dpt:3389
ACCEPT tcp -- anywhere www.xxx.biz tcp dpt:www
ACCEPT tcp -- anywhere anywhere tcp dpt:aol
ACCEPT tcp -- anywhere www.xxx.biz tcp dpt:tproxy
ACCEPT tcp -- anywhere pdc.xxx.ru tcp dpt:https
ACCEPT tcp -- anywhere pdc.xxx.ru tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.215 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.216 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.213 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.212 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.211 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.224 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.222 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.217 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.212 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.209 tcp dpt:www
ACCEPT tcp -- anywhere zmkteh1.xxx.ru tcp dpt:www
ACCEPT tcp -- anywhere zmkteh1.xxx.ru tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.223 tcp dpt:www
ACCEPT tcp -- anywhere zmkteh3.xxx.ru tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.241 tcp dpt:9600
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:789
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:4000
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:4010
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:4050
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:4060
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:ftp
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:www
ACCEPT tcp -- anywhere 192.168.2.241 tcp dpt:9600
ACCEPT tcp -- anywhere 192.168.2.242 tcp dpt:9600
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp
ACCEPT udp -- anywhere anywhere udp dpt:25
APT тут врядли замешан, я не могу пинговать ниодного сайта, есть только доступ к самому серваку(ssh, www, пробросы)