I have the following rules in my iptables (I cut out the rules that aren't relevant to this question):
*raw :PREROUTING ACCEPT :OUTPUT ACCEPT -A PREROUTING -i lo -j NOTRACK -A OUTPUT -o lo -j NOTRACK COMMIT *filter -A INPUT -i lo -j ACCEPT -A INPUT -d 127.0.0.0/8 ! -i lo -j REJECT --reject-with icmp-port-unreachable -A OUTPUT -j ACCEPT COMMIT
I've put this into place because I had overflows on ip_conntrack due to interacting with a server locally over the loopback. Is there any security issues I'm missing here?