On Tue, 2006-05-30 at 23:22 -0300, Vinicius wrote: > Hello, > > On the chain RH-Firewall-1-INPUT, what's the mean of the rules number 1 > and 2, please? > [SNIP] > > Chain RH-Firewall-1-INPUT (2 references) > num target prot opt source destination > 1 ACCEPT all -- anywhere anywhere > 2 ACCEPT icmp -- anywhere anywhere icmp any > " If you try "iptables -L -v" you will see that number 1 is to allow all traffic on the loopback adapter (lo) As for line number 2, this accepts *all* ICMP traffic. Not ideal, just the way it is :-)