'# Allow H323 stuff.'

'iptables -A INPUT -p tcp --dport 1719:1721 --in-interface $EXT_DEV -j ACCEPT'

'# NAT stuff starts at 10000.'

'iptables -A INPUT -p udp --dport 1025:9999 --in-interface $EXT_DEV -j ACCEPT'