Re: hardening checkpoints

[Bernd Eckenfels <ecki@lina.inka.de>]

In article <[🔎] 20051217041545.GA5401@spybotics.blaafladt.net> you wrote:
> Actually, iptables -A INPUT will _append_ a rule to your INPUT chain
> (iptables(8)), and this won't help you if your connection is matched by
> an earlier blocking rule. To really make sure that you can reach the
> machine after a failed firewall-reconfiguration, replace -A with -I,
> which makes the rule inserted at the head of the chain, and hence, the
> first rule to be matched.

And dont forget to do  this to the other tables, at least OUTPUT, also.

Gruss
Bernd