[webmin-l] Default firewall (IPTABLES) set-up for hosting

[Joaquim H. <jo...@we...>]

Not sure if I've asked this before (I just looked through my messages on 
the list going back to 2006), but is there a reason why the FORWARD 
chain is set to "ALLOW/ACCEPT"?

I'm pretty sure that 99.9% of "hosting providers" are would not want to 
allow IPTABLES forwarding. I realize more than this is required, but 
still ...

I always find myself setting the default action to "DROP" for this chain 
in Webmin.


-joho