## Allow all outgoing
iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT

## Management Subnets
iptables -A INPUT -s 202.124.101.64/26 -j ACCEPT
iptables -A INPUT -s 202.124.103.248/29 -j ACCEPT

## Allow
iptables -A INPUT -p tcp --dport 22 -j ACCEPT 		## SSH
iptables -A INPUT -p tcp --dport 20:21 -j ACCEPT 	## FTP
iptables -A INPUT -p tcp --dport 80 -j ACCEPT		## Http
iptables -A INPUT -p tcp --dport 443 -j ACCEPT		## Https
iptables -A INPUT -p icmp -j ACCEPT					## ICMP
iptables -A INPUT -s 127.0.0.1 -j ACCEPT			## From Localhost
iptables -A INPUT -d 127.0.0.1 -j ACCEPT			## To localhost

## Deny
iptables -A INPUT -j REJECT 						## Drop all other.