Does this firewall rule make sense?

yzT! · 03-03-2014, 07:05 AM

If the policies are configured to ACCEPT, does a rule like the one below make sense?

Code:

iptables -A FORWARD -s 10... -o eth1 -p tcp --sp 80 -j ACCEPT

arre · 03-03-2014, 01:44 PM

If the policy is accept, and no other rules match, you will accept the packet.
However, you can still blacklist certain entries by making rules that have a DROP action.

From the info you've shared, I seem to conclude that you would only use that ACCEPT rule. This would have no effect on your packet flow. You can however use the rules to count the amount of packets for example that went through.

Hope this helps