user
04/20/2021, 3:01 PMiptables -A INPUT -m comment -m conntrack --ctstate ESTABLISHED,RELATED,UNTRACKED -j ACCEPT --comment "accept established,related,untracked"
iptables -A INPUT -m comment -p tcp -m tcp --dport 22 -j ACCEPT --comment "Accept SSH port"
iptables -A INPUT -m comment -m conntrack --ctstate INVALID -j DROP --comment "drop invalid"
iptables -A INPUT -m comment -p icmp -j ACCEPT --comment "accept ICMP after RAW"
iptables -P INPUT DROP
Both Forward and Output have accept policy as default
Also tried the following
iptables -A INPUT -m comment -p udp --sport 53 -j ACCEPT --comment "Accept DNS port UDP"
iptables -A INPUT -m comment -p tcp --sport 53 -j ACCEPT --comment "Accept DNS port TCP"