pavement

Default allow

From FreeBSDwiki
(Difference between revisions)
Jump to: navigation, search
m
Line 3: Line 3:
 
Default allow firewalls are not recommended, because there is a [[race condition]] problem - a window of time in between a reset of the firewall to default rules and the re-loading of the extra rules to restrict access in which "anything goes."  See [[Default deny]].
 
Default allow firewalls are not recommended, because there is a [[race condition]] problem - a window of time in between a reset of the firewall to default rules and the re-loading of the extra rules to restrict access in which "anything goes."  See [[Default deny]].
 
[[Category:FreeBSD Terminology]]
 
[[Category:FreeBSD Terminology]]
 +
[[Category:Securing FreeBSD]]

Revision as of 00:54, 14 December 2005

Default allow is a type of firewall ruleset in which the default condition of the firewall is to allow ALL connectivity - from anywhere, to anywhere. A default allow firewall with no additional rules loaded is effectively the same thing as no firewall at all.

Default allow firewalls are not recommended, because there is a race condition problem - a window of time in between a reset of the firewall to default rules and the re-loading of the extra rules to restrict access in which "anything goes." See Default deny.

Personal tools