iptables generic INPUT rule

Joe Tseng joe_tseng at hotmail.com
Mon Nov 5 21:14:47 UTC 2007


I recall seeing an example rule where the person allowed all established 
connections; it went something like this:

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

Is this a safe generic rule to have?  Or is it better for me to state every 
case explicitly? 




More information about the fedora-list mailing list