ip6tables

I want to start a thread about how a one file script for iptables/ip6tables should look like. What default settings are ok and how different services like webserver, mailservers, etc can be unlocked. Why unlocked? Because like word filters I do not prefer blacklists: Everytime I read a post...