# Allow H323 stuff.
iptables -A INPUT -p tcp --dport 1719:1721 --in-interface $EXT_DEV -j ACCEPT
# NAT stuff starts at 10000.
iptables -A INPUT -p udp --dport 1025:9999 --in-interface $EXT_DEV -j ACCEPT