#!/bin/bash
rules() {
# avoid having multiple OUTPUT rules
    iptables -t filter $flag OUTPUT -o ${IF_LAN} -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
}