Re: Problem of Setting dafault polocies to 'DROP'

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 24 Dec 2003 11:12:00 +0000, 
Antony Stone <Antony@xxxxxxxxxxxxxxxxxxxx> wrote in message 
<200312241112.00560.Antony@xxxxxxxxxxxxxxxxxxxx>:

> On Wednesday 24 December 2003 11:03 am, ads nat wrote:
> 
> > The moment I set "iptables -P INPUT DROP"
> > System hangs.
> 
> Are you working on a local keyboard + screen, or via a remote ssh
> session?
> 
> If you are on a network connection, then of course an empty ruleset +
> default DROP policy will block your connection.

...so you will wanna set up a rule set that allows you to finish 
setup of the firewall, before you set up the drop policy.  ;-)

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux