Is there any difference in dropping not-matched packets with default policy vs
-j DROP on the end?
iptables -P INPUT DROP iptables -A INPUT --dport 80 -j ACCEPT
iptables -A INPUT --dport 80 -j ACCEPT iptables -A INPUT -j DROP
The reason why I care is because I can't create chain with log and assing it as default policy so I would need to use the second example.