This question already has an answer here:
Say I have a well updated Linux VPS serving HTTP content on port 80 using apache. What would I gain by enabling IPtables?
I can see no obscurity gains since the machine has a port open. Also, since the machine is constantly updated I trust the kernel to securely handle incoming requests on closed ports, which is reasonable right? I hear everywhere that I need to enable iptables but I fail to see the gains. Am I missing something?