Juan Carlos Inostroza wrote:
iptables -A INPUT -p icmp -j DROP iptables -A INPUT -p tcp -j DROP iptables -I INPUT -p udp -j DROP is the same as iptables -A INPUT -p udp -j DROP iptables -A INPUT -p icmp -j DROP iptables -A INPUT -p tcp -j DROP
The effect certainly is, I was just wondering how the appendage or insertion of another rule worked 'under the hood'.
The background to my question is a 1.4MB IP blacklist I have to block. I traverse so that only incoming NEW from $DEV_INET is passing that chain, but appending the ruleset (i.e. at boottime) takes roughly 30min.
So I was wondering whether inserting might be quicker :-) Martin