To make these changes persist through a reboot, install **iptables-persistent**:
`sudo apt install iptables-persistent`
and click "Yes" when prompted to save current IPv4 rules.
If you make any further changes to the iptables rules, don't forget to run `sudo dpkg-reconfigure iptables-persistent` to make them persist as well.
### Install and configure a DHCP server
**dnsmasq** is a good lightweight DHCP (and DNS, but we won't be using that function) server. To install it run:
`sudo apt install dnsmasq`
And configure the following options in: `/etc/dnsmasq.conf`
`port=0` will disable the built-in DNS server
`interface=eth1` sets which interface to respond to DHCP requests on
`dhcp-range=192.168.1.151,192.168.1.254,255.255.255.0,12h` sets the ip range of the DHCP ip address pool and **12h** is the lease time
`dhcp-option=6,10.64.0.1` sets the DNS server address that will be sent to the DHCP clients (this should be the DNS server supplied by your VPN provider)