ipchians and ssh

[Mike Egglestone <megglestone@heritage.sd57.bc.ca>]

Hi all,

What would be a good ipchains command to block all tcp traffic
to and from a box except "ssh"?
I have a box that will only be running rsync thru ssh.

This is what I tried, but I don't think it worked.

ipchains -I input -p tcp -s 0/0 -d 0/0 ! ssh -j DENY

any help is great!!

Thanks
Mike