On Mon, 2006-05-15 at 16:51 -0500, Hongwei Li wrote: > I want to ask another question -- Why do we need the last line in the file > iptables: > -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited > > If I comment it out, then everything works. Will that cause firewall actually > not functioning? If you remove that line, nothing will get rejected. It's the cactchall rule.
