sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere /* 000 accept all icmp */
ACCEPT all -- anywhere anywhere /* 001 accept all to lo interface */
REJECT all -- anywhere 127.0.0.0/8 /* 002 reject local traffic not on loopback interface */ reject-with icmp-port-unreachable
ACCEPT all -- anywhere anywhere /* 003 accept related established rules */ state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere multiport dports ssh /* 100 tcp/22 */
ACCEPT tcp -- anywhere anywhere multiport dports https /* 100 tcp/443 */
ACCEPT tcp -- anywhere anywhere multiport dports http /* 100 tcp/80 */
DROP all -- anywhere anywhere /* 999 drop all */