# ssh
#LAN#
iptables -A INPUT -p tcp -s 127.0.0.1   --dport 22 -j ACCEPT #localhost
iptables -A INPUT -p tcp -s 192.168.123.0/24 --dport 22 -j ACCEPT #lan
iptables -A INPUT -p tcp -s 192.168.0.0/16 --dport 22 -j ACCEPT #lan
iptables -A INPUT -p tcp -s 192.168.123.164 --dport 22 -j ACCEPT #me
#Others
#iptables -A INPUT -p tcp -s IP    --dport 22 -j ACCEPT #daryl
#ARU
iptables -A INPUT -p tcp -s 195.194.252.25 --dport 22 -j ACCEPT #cale
iptables -A INPUT -p tcp -s 195.194.252.20 --dport 22 -j ACCEPT #enterprise
iptables -A INPUT -p tcp -s 195.194.254.12 --dport 22 -j ACCEPT #beta
iptables -A INPUT -p tcp -s 86.104.100.167 --dport 22 -j ACCEPT #ustupid
#All
iptables -A INPUT -p tcp --dport 22 -j DROP
iptables -A INPUT -p udp --dport 22 -j DROP

# sendmail
iptables -I INPUT -p tcp --dport 25 -j ACCEPT

# let's try to drop x11 port :)
iptables -A INPUT -p tcp --dport 6000 -j DROP

# rules for http :-P

iptables -A INPUT -p tcp --dport 80 --syn -m limit --limit 1/s --limit-burst 2 -j ACCEPT

iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p udp --dport 80 -j DROP

iptables -A INPUT -p udp --dport 21 -j DROP

# stop syn from lamer
#iptables -A INPUT -s IP -j DROP
#iptables -A INPUT -s 192.168.123.165 -j DROP

# ca sa numai vada gusterii uptime ( inpotriva os-fingerpritului)
iptables -A INPUT -p icmp --icmp-type address-mask-request -j DROP
iptables -A INPUT -p icmp --icmp-type address-mask-reply -j DROP