Re: [iptables] Zone based rules
Jimmy Thrasibule <[email protected]> Wed, 10 Apr 2013 00:08:25 +0200
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <1365545305.14410.20.camel@draco> |
> > In can change the rules order but this will not solve the problem. > What about using the RETURN target instead of ACCEPT, and denying > everything in the zone-specific chain? > I believe it would solve the problem. Yes indeed, RETURN can do the trick. > Having an IN and an OUT chain for each zone would mean more efficient > processing also. I'm aware of that but I wanted to have only one entry point for each zone. -- Jimmy _______________________________________________ firewall-wizards mailing list [email protected] https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
signature.asc
(application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) iQIcBAABAgAGBQJRZJFZAAoJEFNYtCSAPHIVOzYP/Rk4y6dvBxaTjYGejBLrQ5Lk H9weBS3TmCZ+FztVhYXD/oGiYx1GgasmU5UzySuYtEvuObyN0wof34jv0V2liVc7 ZZf3JDObYalsl6lIOxtZfbdUVScNu6Gx96ZGW30ZAJJ3DAqeOSNFS67V/z654ACv 2Dw3pp4neUuxih7f5ag74UBg1u+zuSrUF7U6iDqThPwYGjryn30jC/TgWCul23BL 0F1dp1qODJppALlmcLn+1zvRYhHmFqWJFvXHWywGJJlwvPxnbSK0K7xA6QU5N/11 geCPQUdlOGI2zvGHbNVKKJpKfl1mbPyUcI3yqxnFv8OdOCqDlIspB7obTvdjgvN1 LbprdCLpBE+8n19GFwbgYFk2BpOShbQeE9T06v1saIKzMnO3IxTn67+nqLVxxp6o nu3IKvQkgICIT29rqRNN1uJn2J1OGufUeQWNxkHelVjsoumko1DX3WYFRIEqN7Ll tDG6K7UXyFmUYl2IPObxWzGELjNZm4alIfF2njlMgAoNOLRjIxcA1lh+5TLEw/6i EqucJBAD7P6qgZIFtj1DAKwhqGB5k6Ppkcf0R3uPl48UoGoPv1qTwY6MHTk+87U7 uuM9UwXxkhw4OeDwWGUmlJSI4Kw6lcgDMd/lLI2ciM2ZmBGHn0UbXERPckwmZG8e eFUgfSl+UQfb8ZMBeGm1 =VM8K -----END PGP SIGNATURE-----