Changes

OPS335 Firewall Lab

13 bytes added, 15:30, 19 December 2012

m

Set forward chain to drop

#Add a rule to your MYICMP chain that denies ICMP pings originating with MAC address of Fedora host's virbr0.

#Add a rule to the end of your INPUT chain that allows ICMP pings from anywhere.

#Change the default policy on the INPUT ~~chain~~ and FORWARD chains in the filter table to DROP.

===Testing your custom firewall===

932

edits