Mailinglist Archive: opensuse-security (448 mails)

["Martin Peikert" <Martin.Peikert@xxxxxxxxx>]

Mike Otto wrote:

> Someone who explains to me why I cant just append rule 3,4,5,6 at the
> end of the INPUT rules (APPEND) instead I have to INSERT them?
> Is it because of rule 23 which cannot be overwritten?
> Would make sense to me. Then I better insert right bevore line
> 23, right?

First match hits - rule 23 DROPs everything. Any rule after 23 is 
useless. And take a look at

	man iptables

to find out why you can't overwrite rule 23! (Hint: 42.)

GTi