nixCraft

#!/bin/bash
# Clean firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
modprobe ip_conntrack
modprobe ip_conntrack_ftp

# Setting default filter policy, drop all incoming 
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT

# Unlimited access to loop back
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

# Allow UDP, DNS and Passive FTP
iptables -A INPUT -i $INET -m state --state ESTABLISHED,RELATED -j ACCEPT

#allow bittorent incoming client request :)
iptables -A INPUT -p tcp --destination-port 6881:6882 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 443 -j ACCEPT

# router request @ port 514
# iptables -A INPUT -p udp --destination-port 514 -j ACCEPT

#Uncomment below to allow sshd incoming client request
#iptables -A INPUT -p tcp --destination-port 22 -s IP -j ACCEPT

# DROP everything in case ;) and Log it
iptables -A INPUT -j LOG
iptables -A INPUT -j DROP