Hoping someone can clear this up for me. I'm on RHEL7.1 and I noticed that in iptables I have a rule that allows anything incoming. I ran this command to get the line numbers and interfaces just to make sure:
iptables --line-numbers -L -v --verbose
and this is the output. (first line only)
1 30M 2931M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
This is from the input chain. Now here is the last line of the input chain:
42 243K 22M DROP all -- any any anywhere anywhere
Now, I also have many rules in the input chain in between. But I do not understand why I would even need these with the "any any" rule at the very top. Doesn't this defeat the purpose of having iptables running? Do I have a mis-configured firewall here?