Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 1457 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LOCAL: ACCEPT all -- anywhere anywhere???

siska
First line in INPUT OUTPUT and FORWARD chain calls the userdefinded chain LOCAL, which says:

Chain LOCAL (3 references)
target     prot opt source     destination
ACCEPT     all  --  anywhere   anywhere
ACCEPT     all  --  anywhere   anywhere

How comes that filtering still works propper?

Thanks
Barbara
  [:S]


This thread was automatically locked due to age.
Parents
  • 0
    If you take a look at the rules on the console using 


    you see that those rules only match if the incoming or the outgoing interface is lo.

    So this rule allows localhost traffic.

    This is fully ok, in my opinion.

    /polluxxx
    
			
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 

	




Reply

    


  • 
	
    



	
		
	
	



    
	
    
		
    
							
					
    
		
    
			
													0
							
			
				
									
							
						
				
			
					
    
	
    

		
		
    
					
    If you take a look at the rules on the console using 


    you see that those rules only match if the incoming or the outgoing interface is lo.

    So this rule allows localhost traffic.

    This is fully ok, in my opinion.

    /polluxxx
    
			
    

		
		
		
		
	
    
	
    
		
    
			
		
    
	
    
	
    
		
						
				
				
				
				
				
		
		
    
			
		
    
	
    

    

    • 





Children
	
No Data