Iptables defaults to accept input?

[Matt Zimmerman]

On Mon, Sep 20, 2004 at 04:39:35PM +0200, Petri Pennanen wrote:

>  $ sudo iptables -L
> Password:
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination

There is only one open port in a default Ubuntu installation, and it is
assumed that if you install servers on top of that, you want the network to
be able to reach them.

> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination

Irrelevant, because net.ipv4.ip_forward = 0

> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination

You want this open by default. :-)

-- 
 - mdz