that's true
but i read boxes, so i think maybe he are mading a small network
IF not the case we have to construct with INPUT and OUTPUT
the last sentence of the drop general are good? i don't remeber exactly because i use /etc/sysconfig/iptables to my rules!!!!!