{ -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP }
{-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP }
{-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP }
{-A INPUT -i lo -j ACCEPT }
{-A INPUT -p icmp -j ACCEPT}
{-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT }