I got iptables properly configured where I set the policy for INPUT, FORWARD, and OUTPUT to DROP. Amazingly everything appears to still work. I set the server to be in the DMZ. Despite this I’m still  totally stealthy according to GRC’s Shields Up!. I’ve got logging setup and working well. It only catches the surprise portscans coming from chinese hackers. The next thing will be parsing the data I’m collecting into some interesting information. I haven’t got logsurfer+ setup yet, maybe I can do that tomorrow.