Hardware, Installation, Up2Date, Licensing Rules

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 5 replies
Subscribers 2 subscribers
Views 1017 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Rules

Mawa over 22 years ago

Is necessary to have a last rule wit ANY ANY DENY.

Any comment about this is welcome.

This thread was automatically locked due to age.

0 LoosInt over 22 years ago

no, ASL denies by default

Greetings
Tom
Cancel
Vote Up 0 Vote Down

Cancel
0 tank over 22 years ago

Generally no, since the default action is to drop.

Deny will send a response back, and this usually is not the best thing to do. Drop is usually better because the client will have to timeout, makes scanners take alot longer and gives less info out.
Cancel
Vote Up 0 Vote Down

Cancel
0 uncue75 over 22 years ago in reply to tank

My last rule is any any any drop log. the reason for is so I can see what is going on, who is trying to do what, etc...

HTH
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 22 years ago in reply to LoosInt

So technically it is Default Drop, but in the firewall trade we often use the more general security phrase Default Deny...
Cancel
Vote Up 0 Vote Down

Cancel
0 Mawa over 22 years ago in reply to tank

Thnx for the info.
Cancel
Vote Up 0 Vote Down

Cancel