iptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -p udp --sport 53 -j ACCEPT iptables -A INPUT -d localhost -j ACCEPT iptables -A INPUT -m mac --mac-source xx:xx:xx:xx:xx:xx -j ACCEPT iptables -P INPUT DROP