*filter
-I INPUT -m state --state INVALID -j DROP