Hi Thx for the quick reply. Forgot to mention I am using NFTables...but I guess this should be then possible as well. Thx Andy Am 13.08.20 um 14:28 schrieb Andreas Hoefler: > I have a chain with default policy drop. > I would like to first have the default policy set to accept, then add rules and later change it to drop. > Is this possible? iptables -t <table> -P <CHAIN> ACCEPT iptables -t <table> -P <CHAIN> DROP