Re: Dynamic IP Address
On Mon, Mar 26, 2001 at 11:20:38PM +1000, Mark Devin wrote:
> Michael Boyd wrote:
>
[snip]
> Make sure that the first part of your firewall script includes
> lines like:
> iptables -F
> iptables -X
> so that the rules set up by the initial firewall are deleted
> when the real firewall is installed.
[snip]
I would suggest something along these lines:
1.) Set policy for input/output/forward chains to DENY
2.) Flush all rules and delete all user defined chains (-F and
-X)
3.) Set up rules you want.
4.) Change policy of chains to something else if you don't want
them to be DENY (although that is usually best.)
Then you won't have any time window where your policy is ACCEPT,
you've just flushed all rules and are about to add new ones.
--
Michael Wood | Tel: +27 21 762 0276 | http://www.kingsley.co.za/
wood@kingsley.co.za | Fax: +27 21 761 9930 | Kingsley Technologies
Reply to: