default-lease-time 600;
max-lease-time 7200;
ddns-update-style none;



subnet 192.168.1.0 netmask 255.255.255.0 {
  range 192.168.1.2 192.168.1.20;
  option domain-name "red-sniper.com";
  option domain-name-servers 192.168.1.1;
  option routers 192.168.1.1;
  option broadcast-address 192.168.1.255;

}

Internet Software Consortium DHCP Server V3.0pl2
Copyright 1995-2003 Internet Software Consortium.
All rights reserved.
For info, please visit http://www.isc.org/products/DHCP
Wrote 0 leases to leases file.
Listening on Socket/eth1/192.168.1.0/24
Sending on   Socket/eth1/192.168.1.0/24

#!/bin/bash

EXT_DEV=ppp0
INT_DEV=eth1
INT_NET=192.168.1.0/24

iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X

iptables -P INPUT   DROP
iptables -P OUTPUT  ACCEPT
iptables -P FORWARD DROP

iptables -A INPUT  -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT

iptables -A INPUT   -p icmp -j ACCEPT
iptables -A FORWARD -p icmp -j ACCEPT

iptables -A INPUT  -i eth1 -s $INT_NET -d $INT_NET -j ACCEPT

iptables -A FORWARD -i $INT_DEV -o $EXT_DEV -j ACCEPT    ##

iptables -t nat -A POSTROUTING -o $EXT_DEV -s $INT_NET -j MASQUERADE ##

iptables -A INPUT   -i $EXT_DEV -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i $EXT_DEV -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -t nat -A PREROUTING -i $INT_DEV -s $INT_NET -d ! $INT_NET -p tcp -m multiport --dport 80  -j REDIRECT --to-port 3128 ##

# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;