During analysis of my firewall, created by the debian ipmasq package, I noticed many DROP definitions on the OUTPUT chain. The default OUTPUT chain's policy is set to DROP. At the moment even DHCPREQUEST's fail according to daemon.log, which is definitely wrong.

Do I need dropping rules in OUTPUT? I am the only internal user, and it does seem weird to have restrictions on outgoing traffic. However, I guess there is a reason for these rules, otherwise they wouldn't be in the default definitions. So, does anyone know why they are there?

Gilion