IP-Tables and Security in General

[Neil Watson]

1. Use a default policy of deny on all chains.
2. See step 1.
3. Use abstraction iptables wrappers like Shorewall and Fwbuilder.

-- 
Neil Watson
Linux/UNIX Consultant
http://watson-wilson.ca
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists