iptables firewall config

saispace was giving too much trouble - bad network cable? - so connecting directly now instead of through NAT. So, set up firewall. Important part is the default

-A INPUT -i eth0 -j REJECT

just before the last COMMIT in the *filter table.