#!/bin/bash

#run iptables service
service iptables stop
service iptables start

 


#add iptables kernal

modprobe ip_tables
modprobe iptable_nat
modprobe ip_nat_ftp
modprobe ip_conntrack


#clear and default iptables

iptables -F
iptables -X
iptables -Z


iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT


#set iptables policy

#1
iptables -A INPUT -p icmp --icmp-type 8 -j DROP
iptables -A INPUT -p icmp --icmp-type 0 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT