iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F iptables -t mangle -X iptables -N IN_ssh iptables -A IN_ssh -s 10.1.1.19 -j ACCEPT iptables -P INPUT ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT iptables -A INPUT -p tcp --dport 22 -j IN_ssh iptables -A INPUT -j LOG --log-prefix last_drop: iptables -A INPUT -j DROP #iptables -A INPUT -j LOG #iptables -A INPUT -j DROP iptables -N OUT_dns iptables -A OUT_dns -j LOG iptables -A OUT_dns -j ACCEPT iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT iptables -P OUTPUT DROP iptables -A OUTPUT -p udp --dport 53 -j OUT_dns