#!/bin/bashiptables -Fiptables -F -t natiptables -Xiptables -P INPUT DROPiptables -P OUTPUT DROPiptables -P FORWARD ACCEPT#load connection-tracking modulesmodprobe ip_tablesmodprobe iptable_natmodprobe ip_nat_ftpmodprobe ip_nat_ircmodprobe ip_conntrackmodprobe ip_conntrack_ftpiptables -A INPUT -i lo -j ACCEPTiptables -A OUTPUT -o lo -j ACCEPTiptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPTiptables -A INPUT -p tcp -m multiport --dports 22,80 -j ACCEPTiptables -A INPUT -p icmp --icmp-type 0 -j ACCEPTiptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPTiptables -A OUTPUT -p tcp -m multiport --dports 22,80 -j ACCEPTiptables -A OUTPUT -p icmp --icmp-type 8 -j ACCEPT