*filter :INPUT DROP :FORWARD DROP :OUTPUT ACCEPT -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p icmp --icmp-type ping -j ACCEPT -A INPUT -p tcp --dport 22 -j ACCEPT -A INPUT -p tcp --dport 5665 -j ACCEPT -A INPUT -p tcp --dport 9200 -s 96.126.113.89/32 -j ACCEPT COMMIT