iptables -A FJ-vnet0 -p icmp -m state --state NEW,ESTABLISHED -j RETURN
iptables -A FP-vnet0 -p icmp -m state --state ESTABLISHED -j ACCEPT
iptables -A HJ-vnet0 -p icmp -m state --state NEW,ESTABLISHED -j RETURN
iptables -A FJ-vnet0 -p all -j DROP
iptables -A FP-vnet0 -p all -j DROP
iptables -A HJ-vnet0 -p all -j DROP