It's really a headache...How I can adjust the iptables so that i can block most of the unused. The main problem is even I know all the well-known ports or others well known application ports, I still cannot know all of other occupied but hidden ports. Headache.....

So many headache nowadays....