IPTables Script - Verbessungsvorschläge?

[sim4000]

Moinsen,

ich hab im Moment ein bisschen Zeit, und wollte mich mal ein wenig mit openVPN beschäftigen, und hab mir nen root Server gemietet.
War nur ein Scherz. ^^ Hab für sowas nen Home Server in der Abstellkammer stehen. *g*

Wie dem auch sei...
Aus dem Grund hab ich mir mal ein IPTables Script gebastelt. Gibt es Verbesserungsvorschläge?

#!/bin/bash
 
BIN=/usr/sbin/iptables
. /etc/rc.conf
. /etc/rc.d/functions
 
if [ $(id | cut -c5- | cut -d "(" -f1) != 0 ]; then
	echo "Not root!"
	exit 0;
else
	echo ""
	echo ""
fi
 
 
case "$1" in
 
   start)
      stat_busy "Starting IPTables Firewall"
         stat_busy "Setting IPTables Rules"
            # Clear Chains
            $BIN --flush
            $BIN --delete-chain
            # INPUT Chain
	       $BIN -P INPUT DROP
	       # Enable free use of loopback interface
	          $BIN -A INPUT -i lo -d 127.0.0.1 -j ACCEPT
	       # ACCEPT TCP  and UDP Packets from Local Network
                  $BIN -A INPUT -p tcp -s 192.168.178.0/16 -j ACCEPT
		  $BIN -A INPUT -p udp -s 192.168.178.0/16 -j ACCEPT
               # ACCEPT SSH Port
	          $BIN -A INPUT -p tcp --dport 22 -j ACCEPT
	       # ACCEPT Nameserver
	          $BIN -A INPUT -p udp --sport 53 -j ACCEPT
	       # ACCEPT ICMP from Local Network
	          $BIN -A INPUT -p icmp -s 192.168.178.0/16 -j ACCEPT
 
	    # FORWARD Chain
	       $BIN -P FORWARD DROP
	       # Forward Packets from Local Network
	          $BIN -A FORWARD -s 192.168.178.0/16 -j ACCEPT
	       # Forward Packets from VPN
	          $BIN -A FORWARD -s 10.0.0.0/24 -j ACCEPT
 
            # OUTPUT Chain
	       $BIN -P OUTPUT ACCEPT
 
         stat_done
 
         # Packet Forwarding
	 stat_busy "Enabling packet forwarding"
	    if echo 1 > /proc/sys/net/ipv4/ip_forward; then
               stat_done
            else
               stat_fail
            fi
 
      stat_done
 
   ;;
   stop)
      stat_busy "Stopping IPTables Firewall"
         # Reset IPTables Chains
         stat_busy "Clear IPTables Chains"
         $BIN --flush
         $BIN --delete-chain
         # Create IPTables Chains
         $BIN -P INPUT ACCEPT
         $BIN -P FORWARD ACCEPT
         $BIN -P OUTPUT ACCEPT
	 stat_done
	 # Disable Packet Forwarding
         stat_busy "Disabling packet forwarding"
	    if echo 0 > /proc/sys/net/ipv4/ip_forward; then
               stat_done
            else
               stat_fail
            fi
      stat_done
   ;;
 
   restart)
      $0 stop
      $0 start
   ;;
 
   *)
      echo "Usage: $0 {start|stop|restart}"
 
esac

Lg, sim.