iptables

/sbin/iptables -F
/sbin/ip6tables -F

## Remove all current entries

/sbin/iptables -X
/sbin/ip6tables -X

## Drop inputs

/sbin/iptables -P INPUT DROP
/sbin/ip6tables -P INPUT DROP

## Drop forwards

/sbin/iptables -P FORWARD DROP

## Drop XMAS scans and NULL

/sbin/iptables -A INPUT -p tcp --tcp-flags FIN,URG,PSH FIN,URG,PSH -j DROP
/sbin/iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
/sbin/iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
/sbin/iptables -A INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j DROP

## Allow established connexions

/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

## Allow local connexions

/sbin/iptables -I INPUT -i lo -j ACCEPT

## Open some ports

/sbin/iptables -A INPUT -p tcp --dport ssh -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 80 -j ACCEPT

exit 0