Topic: IPtables

[uniQ]

How about a server-manager pane for IPtables? or... when a svr like SSH is configured to not accept connections from the Inet, a iptable automatically drops into place to shield it from passing scanners?

Thanks for listening!

         -uniQ

[Charlie Brady]

uniQ wrote:

> How about a server-manager pane for IPtables?

There's no need. See below.

> or... when a
> svr like SSH is configured to not accept connections from the
> Inet, a iptable automatically drops into place to shield it
> from passing scanners?

That's exactly what happens currently.  IOW, the iptables rules are set by policy (services a & b enabled, others disabled), so there's no need to allow the admin to explicitly set rules(*).

Charlie

(*) But they still can via custom templates if they feel they need to.