[CentOS] contradictory netfilter default policy

Michael Klinosky mpk2 at enter.net
Tue Apr 7 17:10:02 UTC 2009

I'm curious why CentOS contradicts its own (or, actually RH's) netfilter
default policy.

On http://wiki.centos.org/HowTos/Network/IPTables , at the end of
section 1, it's stated that (generally) the default policy for INPUT is
to DROP. So, why is it set to ACCEPT?

Btw, Fedora is also this way.

More information about the CentOS mailing list