Jason, Thanks for your response. I definitely appreciate the help. On Wed, 01 Sep 2004 12:50:58 -0400, Jason Opperisano <opie@xxxxxxxxxxx> wrote: > > 1. Can appended rules override default polices? > > yes--for example: > > iptables -P INPUT DROP > iptables -A INPUT -j ACCEPT Excellent. Now I'm clear on this point. > if you set the policies of the mangle chains to DROP and then do not > append any rules, you can be pretty sure that no traffic will get > through. > > i'd recommend against starting your netfilter adventure by setting the > policies of nat & mangle chains to DROP. it will make it a very short > trip... > This is starting to get clearer after reading some of Adreasson's tutorial and following the flow of packets traversing the tables. It looks like 'mangle' is right there at the beginning of every table transaction, so my mangle Policy is pre-empting everything else. Best regards. Mike
