1-P INPUT DROP
2-P FORWARD DROP
3-P OUTPUT DROP
4-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
5-A INPUT -i lo -j ACCEPT
6-A INPUT -p icmp -j ACCEPT
7-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
8-A INPUT -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
9-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
10-A OUTPUT -o lo -j ACCEPT
11