Iptables Golf

We've all seen regex golf - now can someone create iptables golf? This would be targeted at remote administrators - successfully implement the prescribed conditions with the fewest iptables rules without locking yourself out. I'm not the only one who locked him/herself out of a remote machine trying to edit iptables, right?