#!/bin/bash IPTABLES=/usr/sbin/iptables # Flush the tables. $IPTABLES -F # Drop bootp ports. $IPTABLES -m multiport -A INPUT -p tcp --dports 67,68 -j DROP $IPTABLES -m multiport -A INPUT -p udp --dports 67,68 -j DROP # Drop netbios ports. $IPTABLES -m multiport -A INPUT -p tcp --dports 137,138,139 -j DROP $IPTABLES -m multiport -A INPUT -p udp --dports 137,138,139 -j DROP