If the default policy is accept, these rules don't make any change and therefore unnecessary. You also have no firewall protection with a default accept policy for INPUT, OUTPUT, and FORWARD. Don ----- Original Message ----- From: "Marek" <marekp@iafrica.com> To: <security-discuss@linuxsecurity.com> Sent: Tuesday, October 29, 2002 11:02 AM Subject: iptables > > Hi > > This machine is part of a network used for email and browsing. It works > with or without these rules. Should they be there ? > > ACCEPT tcp -- 0.0.0.0/0 192.168.0.0/24 tcp dpt:25 > ACCEPT tcp -- 0.0.0.0/0 192.168.0.0/24 tcp dpt:80 > ACCEPT tcp -- 0.0.0.0/0 192.168.0.0/24 tcp dpt:110 > ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp > dpts:6000:6015 > ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp > dpts:6000:6015 > > -- > Marek > __ > ----/ / _ > ---/ / (_)__ __ ____ __ > --/ /__/ / _ \/ // /\ \/ / > -/____/_/_//_/\_,_/ /_/\_\ > > > > > ------------------------------------------------------------------------ > To unsubscribe email security-discuss-request@linuxsecurity.com > with "unsubscribe" in the subject of the message. > ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.