On Wed, Oct 09, 2013 at 04:24:18AM -0400, shawn wilson wrote: > This will do nothing unless you have a default DROP policy …which generally speaking I would advise against. If you have a default ACCEPT policy and your last rule is a DROP, you are resilient against accidentally issuing "iptables -F" (or having something else accidentally do that). With a default DROP policy and no rules, you're locked out. (on your default interface e.g. eth0, em0, en0, at least)