#! / bin / bashiptables -finputiptables -f outputiptables -f forward
iptables -p input dropiptables -p output dropiptables -p Forward DropiP
iptables -a input -p tcp --dport 22 -s xxx.xxx.xxx.xxx/32 -j acceptiptables -a output -p tcp --sport 22 -d xxx.xxx.xxx.xxx/32 -j acceptables - A INPUT -P TCP - DPORT 22-S 0/0 -j dropiptables -a output -p tcp --sport 22 -d 0/0 -j DROP Need to note that iptables 1.2.11 version is set by default The iptables -p chain -j target syntax is no longer used when the rules will be omitted directly.
