I use iptables to secure my server. The default policies for all chains in the filter table have been set to DROP

# iptables -t filter -L | grep -i \ (policy
Chain INPUT (policy DROP)
Chain FORWARD (policy DROP)
Chain OUTPUT (policy DROP)

I wonder if it is useful to also set the policies to DROP for mangle, raw and security tables (not nat table because it does not work) in order to more secure the server ?

And of course duplicate the access rules for each tables setted to DROP


No, you shouldn't set these policies on the other tables to DROP, these tables are not meant to filter.

You may want to try it on a local machine, where you have local access even if you block the network.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.