On 10/09/2007, Alex Samad <[EMAIL PROTECTED]> wrote:
>
> iptables -P INPUT REJECT
> iptables: Bad policy name


This complies with what I understand from the man page of iptables
1.3.6(Debian Etch):

-P, --policy chain target
Set  the policy for the chain to the given target.  See the section TARGETS
for the legal targets...neither built-in nor user-defined chains can be
policy targets.

TARGETS
...one of the special values ACCEPT, DROP, QUEUE, or RETURN.

I haven't analysed this too much but I suspect that this limitation was put
to prevent rule loops.

--Amos
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to