Actually set INPUT chain policy

geerlingguy / ansible-role-firewall

Ansible Role - iptables Firewall configuration.

https://galaxy.ansible.com/geerlingguy/firewall/

MIT License

524 stars 217 forks source link

Actually set INPUT chain policy #71

Closed amette closed 4 years ago

amette commented 4 years ago

The iptables syntax for dropping packets by default is wrong and therefore the firewall doesn't actually do anything.

amette commented 4 years ago

I just realised that the firewall indeed did drop packets, because they went to a non-existing chain and one can't create a chain named DROP. So this is nothing critical, gnumonks were smart. :)

You might still want to merge this due to cleaner syntax.

stale[bot] commented 4 years ago

This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark pull requests as stale.

stale[bot] commented 4 years ago

This pull request has been closed due to inactivity. If you feel this is in error, please reopen the pull request or file a new PR with the relevant details.