Ensure nftables Default Deny Firewall Policy
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
Base chain policy is the default verdict that will be applied to packets reaching the end of
the chain. There are two policies: accept (Default) and drop. If the policy is set to accept,
the firewall will accept any packet that is not configured to be denied and the packet will
continue traversing the network stack.
Rationale
It is easier to allow acceptable usage than to block unacceptable usage.
Warning
Changing firewall settings while connected over network can result in being locked out
of the system.
