Tag Info

Hot answers tagged

2

You don't need to add or even have custom direct chains (though you can if you want to get really complicated. Just add to your existing chains directly. After IP version, table, chain and priority, you simply specify the relevant iptables options: firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 \ -m owner --uid-owner $UID -j ...


2

You can safely disable anything that you do not need. For example, does your server get its IP address and gateway settings from DHCP? If Yes -> You can not disable DHCP. If No -> You can disable DHCP. Do you need your server to response to pings? If no, feel free to disable ICMP rules. Do you use IPv4 and not IPv6 at all? Feel free to disable all IPv6 ...



Only top voted, non community-wiki answers of a minimum length are eligible