Am 03.11.21 um 19:25 schrieb serando:
Hello Ged and all other
Thank you very much.
Here is my first question:
The iptables configuration is as follows:
$ sudo iptables -L
Output:
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
I have read that with this configuration, my browser only accepts data
from the Internet, if it has requested the data. This means that all
packets that the browser has not requested are dropped.
Question 1:
Which programme now ensures that data acceptance of unrequested packets
is dropped with the above iptables configuration? Is it Netfilter? In
this case, does Netfilter filter out these unrequested packets?
this configuration does exactly *nothing* at all becasue all chains are
*empty* with a default ACCEPT policy
a mailing-list is really the wrong place when you start with that low
understanding
your browser doesn't do anything to begin with, it's the network stack
and for what you try to achieve google for "stateful packet filtering"
and "conntrack"
