-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi people, I was wondering whether I really need to include these rules if I am already using a default rule of DROP for INPUT, OUTPUT and FORWARD chains. Default rule:- iptables -P INPUT DROP iptables -P OUTPUT DROP iptables -P FORWARD DROP Do I really need these rules? To protect me from these scans.. iptables -I FORWARD -p tcp --tcp-flags ALL ALL -j DROP iptables -I INPUT -p tcp --tcp-flags ALL ALL -j DROP #nmap NULL-Packets drop iptables -I FORWARD -p tcp --tcp-flags ALL NONE -j DROP iptables -I INPUT -p tcp --tcp-flags ALL NONE -j DROP Thanks, Didier -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.0 (MingW32) iD8DBQE9+vVhH0p2xGbWNGwRAqebAJ9qQqpvAY0wZ50NqiaaW51HyQHLGwCePEAo NPYRxMYonG0SWe0GzKiNb3M= =bEjK -----END PGP SIGNATURE-----