
	# Protect against common attacks
	ipt -A in_all -p tcp ! --syn -m state --state NEW -j DROP		# NEW packets should be SYN
	ipt4 -A in_all -f -j DROP						# IP fragmentation attack (IPv4 only)

	ipt -A in_all -p tcp --tcp-flags ACK,FIN FIN -j DROP
	ipt -A in_all -p tcp --tcp-flags ACK,PSH PSH -j DROP
	ipt -A in_all -p tcp --tcp-flags ACK,URG URG -j DROP
	ipt -A in_all -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
	ipt -A in_all -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP
	ipt -A in_all -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
	ipt -A in_all -p tcp --tcp-flags ALL ALL -j DROP			# XMAS packets
	ipt -A in_all -p tcp --tcp-flags ALL NONE -j DROP			# NULL packets
	ipt -A in_all -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
	ipt -A in_all -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP
	ipt -A in_all -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP

