Possible Duplicates:
Why should I firewall servers?
Why would I need a firewall if my server is well configured?
For a single web server that only listens on 22/80/443, is a firewall (iptables) really necessary? What exactly is it protecting against if there are only two properly configured services listening on three ports?