ipv6 question!

Michael Casey michaelcasey73 at gmail.com
Mon Jun 1 09:36:54 UTC 2009

 So, could it be reality, that the "next-generation" Linux Distro's e.g.:
iptables will Default not ACCEPT, rather then this:
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

+ allow ICMP on INPUT because I heard/read that IPv6 relies more on ICMP

it could make a "good standard firewall" (?FIXME) - if anyone puts any
server service, than he must know that he must change the INPUT XYZ

sorry for just stating these kind of things :D just thinking..

I only seen a few distros, but they policy were default ACCEPT everywhere :O
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20090601/ffde5472/attachment.html>

More information about the ubuntu-users mailing list