off: So, could it be reality, that the "next-generation" Linux Distro's e.g.: iptables will Default not ACCEPT, rather then this: -------------------- iptables -P INPUT DROP iptables -P OUTPUT ACCEPT iptables -P FORWARD DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
+ allow ICMP on INPUT because I heard/read that IPv6 relies more on ICMP -------------------- it could make a "good standard firewall" (?FIXME) - if anyone puts any server service, than he must know that he must change the INPUT XYZ sorry for just stating these kind of things :D just thinking.. I only seen a few distros, but they policy were default ACCEPT everywhere :O /off
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
