#!/bin/sh

iptables=/sbin/iptables
$iptables -F
$iptables -X

$iptables -P INPUT DROP

$iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$iptables -A INPUT -m state --state INVALID -j DROP
$iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

$iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT

$iptables -A INPUT -s 127.0.0.1 -j ACCEPT

#$iptables -A INPUT -p icmp -j DROP
#$iptables -A INPUT -p icmp --icmp-type echo-request -m limit --limit 1/s -j DROP
#$iptables -A INPUT -p icmp --icmp-type echo-request -j REJECT
$iptables -A INPUT -m state -p icmp --state INVALID -j REJECT
$iptables -A INPUT -p tcp ! --syn -m state --state NEW -j REJECT
$iptables -A INPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j DROP

echo "IPtables"