What should I think about if i set all my POLICIES to DROP?

Last time I had drop on all of them I couldn't browse on the net,

You most definitely will not be able to browse the net if your default policies are set to DROP.

There is a prebuilt firewall for about any need right here. Just browse through them till you see one that fits your needs.

Try a gui firewall configurer like Guarddog or Firestarter to tweak it to your needs.

not really found of GUI's and autoconf tools but ill check out that netfilter site and see if I find a quick example of what im looking for...
Don't think I wan't to use a prebuilt script was kinda looking forward to writing my own.

btw if I set all my policies to DROP shouldn't I be able to allow browsing? something like this (except this doesn't work)

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

# (know port 80 is for internal webserver, couldn't I change the
# port to ??? so browsing is allowed
# eth0 = external iface
# eth1 = internal iface (192.168.0.0/24)

iptables -A OUTPUT -i eth0 -p TCP --sport 80 -j ACCEPT
iptables -A FORWARD -i eth1 -p TCP --sport 80 -j ACCEPT


btw thanks for the site

Try

iptables -A FORWARD -i eth0 -o eth1 -p tcp --dport 80 -m state --state ESTABLISHED,RELATED

Https normally use port 443 you might want to allow that if you plan to use your online bank or something similar

You do realize this thread is almost 8 years old, don't you?

Lol yeah, but that doesn't make this information any less relevant. Of course, there are better things out there than linux iptables now, but people still use them.

Oooops! Its not my fault I didnt look at the dates