Simple ovh tables

apt install busybox -y

apt install iptables-persistent netfilter-persistent conntrack nftables -y

systemctl enable netfilter-persistent
systemctl start netfilter-persistent

# Drop Protocols that are Fragmented but accept legit traffic
iptables -A INPUT -f -j DROP
iptables -A INPUT -p tcp -j ACCEPT
iptables -A INPUT -p udp -j ACCEPT
iptables -A INPUT -p icmp -j DROP
iptables -A INPUT -p tcp -f -j DROP
iptables -A INPUT -p udp -f -j DROP
iptables -A INPUT -p icmp -f -j DROP

iptables --policy INPUT ACCEPT
iptables --policy OUTPUT ACCEPT
iptables --policy FORWARD ACCEPT

#Shitty Flags
iptables -t raw -A PREROUTING -p gre -j DROP
iptables -t raw -A PREROUTING -p esp -j DROP
iptables -t raw -A PREROUTING -p ah -j DROP

#Shout Out to the Homie Trinity for these
iptables -A INPUT -p tcp --dport 80 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p udp --sport 25000:65535 -j DROP
iptables -A INPUT -p udp -m length --length 1000:65500 -j DROP

iptables -t raw -A PREROUTING -p udp -m multiport --sports 111,19,137,27036,17185,3702,7,3283,161,5060,1434,69,389,520 -j DROP
iptables -t raw -A PREROUTING -p udp -m multiport --sports 5093,50000,7001,11211,10001,10080,48899,27960,30718,2362,41794,32414,17,5683 -j DROP
iptables -t raw -A PREROUTING -p udp -m multiport --sports 37810,500,502,1194,53413,2049,33848,68,524,47808,47811:47823 -j DROP


#Drop Raw Methods
iptables -A PREROUTING -t raw -m rpfilter --invert -j DROP
ip6tables -A PREROUTING -t raw -m rpfilter --invert -j DROP

#Only use this if you are using Wireguard
iptables -A INPUT -i wg0 -j ACCEPT

#Only use this if you are using Openvpn
iptables -A INPUT -i tun0 -j ACCEPT

#Drop Internals ips
iptables -A INPUT -s 10.7.0.0/24 -j ACCEPT
iptables -A INPUT -s 10.0.0.0/8 -j DROP
iptables -A INPUT -s 169.254.0.0/16 -j DROP
iptables -A INPUT -s 172.16.0.0/12 -j DROP
iptables -A INPUT -s 192.168.0.0/16 -j DROP
iptables -A INPUT -s 224.0.0.0/3 -j DROP
iptables -A INPUT -s 127.0.0.0/8  -j DROP

iptables-save > /etc/iptables/rules.v4