[iptables] drop or accept policy for outgoing connections.

Daniel Curtis <[email protected]> Sat, 22 Jun 2013 11:50:24 +0200
Newsgroups gmane.linux.debian.devel.firewall
Message-ID <CAASvXNud1kkJA8B+QYf_huNRwvRnpVLFwLkfmafw-ruUGO5VcQ@mail.gmail.com>
Hi

I have a question about iptables and rules for OUTPUT
chain. If I have a typical desktop without any services
like SSH, Samba etc. it is better to use something like?;

iptables -P DROP
iptables -A OUTPUT -o eth0 -j ACCEPT

or it does not matter and it could be a simple one rule;

iptables -P OUTPUT ACCEPT

I'm asking because I'm curious. And frankly I've always been.

Best regards.