From: Lars Nooden <lars.curator@gmail.com>
Cc: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: REJECT as a default policy
Date: Tue, 12 Jan 2010 15:31:31 +0200 [thread overview]
Message-ID: <4B4C79B3.5020508@gmail.com> (raw)
In-Reply-To: <4B4C7242.9070403@freemail.hu>
Gáspár Lajos wrote:
> IMHO:
> I do not like to waste resources.
> An "unwanted/unallowed" incoming packet is already wasting time/bandwidth.
> A reply (ICMP or whatever else) to this makes you waste your precious
> resources.
> (Think about the ASYMMETRIC DSL)
Don't misunderstand the request. It is not a request to prohibit the
possibility of using DROP as the default policy for chain, but one of
*also* allowing use of REJECT as a default policy for a chain. It is
simply easiest, from a configuration standpoint, to set default with
a "-P"
There are times and conditions when DROP will be the appropriate
default, there are times and conditions when REJECT is the appropriate
default. Currently REJECT can be done by adding it to the end of a
chain, effectively making it default.
Regards
/Lars
next prev parent reply other threads:[~2010-01-12 13:31 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-11 12:02 REJECT as a default policy Lars Nooden
2010-01-11 20:12 ` Gary Smith
2010-01-11 22:08 ` Richard Horton
2010-01-11 22:12 ` Gary Smith
2010-01-12 11:21 ` Lars Nooden
[not found] ` <4B4C7242.9070403@freemail.hu>
2010-01-12 13:31 ` Lars Nooden [this message]
2010-01-12 14:54 ` Mart Frauenlob
2010-01-12 7:53 ` Mart Frauenlob
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B4C79B3.5020508@gmail.com \
--to=lars.curator@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox