On Monday 2011-06-20 13:55, Adishesh M wrote: >Hi, > >Is it mandatory (or recommended) to use interface as option to enable >a particular port using iptables filter table. > >If we don’t use interface name while forming a rule, then are we >compromising anything with respect to security? They do different things, and hence there is no universal answer. At times you want all packets of one given interface, at other times, you want packets with one address on all interfaces. The two sets certainly can be different (mathematically), so choose wisely. Especially since addresses can occur on any interface. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
