iptables -F
iptables -F INPUT
iptables -F OUTPUT
iptables -F FORWARD
iptables -F -t mangle
iptables -F -t nat
iptables -X
iptables -Z

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT
iptables -A INPUT -p ICMP -j ACCEPT

##FTP
iptables -A INPUT -p tcp -m tcp --dport 21 -j ACCEPT

##SSH
iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

##Telnet
iptables -A INPUT -p tcp -m tcp --dport 23 -j ACCEPT

##SMTP
iptables -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT

##HTTP
iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT

##POP3
iptables -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT

##HTTPS
iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT

##MS SQL
iptables -A INPUT -p tcp -m tcp --dport 1433 -j ACCEPT

##Oracle
iptables -A INPUT -p tcp -m tcp --dport 1521 -j ACCEPT

##SSH port redirection
#iptables -t nat -A PREROUTING -p tcp --dport 2222 -j REDIRECT --to-port 22

##Drop everything else
iptables -A INPUT -j DROP

##Save and restart
service iptables save
service iptables restart


