Comments on: How To Setup an Iptables Firewall to Enable Remote Access to Services in Linux – Part 8

By: Uri

Uri — Mon, 09 Nov 2020 17:04:25 +0000

Thank you! this guide helped me a lot – especially on the NAT part.

By: Brody

Brody — Mon, 25 Apr 2016 01:44:33 +0000

I was following the tutorial for ubuntu 14.04 at https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-iptables-on-ubuntu-14-04
They change the default policy in the section titled “Implementing a Drop Rule.”

By: Gabriel A. Cánepa

Gabriel A. Cánepa — Fri, 22 Apr 2016 15:14:19 +0000

In reply to Brody.

@Brody,
Have you been able to test this? Perhaps the most appropriate wording for the text in the image would have been “It is recommended that…”. To clear all doubts, please reply to this comment with the URLs you are referring to, and if possible, the distributions used.
Best,
Gabriel

By: Brody

Brody — Fri, 22 Apr 2016 01:47:43 +0000

In image http://www.tecmint.com/wp-content/uploads/2015/01/Iptables-Policies-620×340.png it says “you can change the default policy for a specific chain only if that chain has been flushed of all its rules.” Is this true of all versions of iptables? The reason I ask is because I’ve found tutorials that add rules to the input chain (for SSH) and then later change the default INPUT policy to drop.

By: Gabriel Cánepa

Gabriel Cánepa — Fri, 08 May 2015 23:57:20 +0000

In reply to birdman.

@birdman,
If you know of a better alternative which works best for you, feel free to use it. Keep in mind that both the LFCS and the LFCE are performance-based, so you have the freedom to choose any tool / command you feel for comfortable with as long as it gets the job done.