1 iptables -t filter -A INPUT -m conntrack -j DROP --ctstate INVALID
2 iptables -t filter -A INPUT -m conntrack -j REJECT --ctstate DNAT,SNAT
3 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctproto ftp
4 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctorigsrc 10.0.0.0/8
5 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctorigdst 127.0.0.01
6 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctreplsrc ! 1.2.3.3
7 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctreplsrc ! 1.2.3.4
8 iptables -t filter -A INPUT -m conntrack -j REJECT --ctrepldst 1.2.3.5
9 iptables -t filter -A INPUT -m conntrack -j REJECT --ctrepldst 1.2.3.6
10 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctstatus ASSURED
11 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctstatus EXPECTED
12 iptables -t filter -A INPUT -m conntrack -j ACCEPT --ctexpire 10