Tricky question on rules

[phoenixsecure]

Hi,

I have a question, normaly in the rules you put a clean-up rule at the end, any any any drop. So far so good. But what append when you have protocol that are not included in the any rule. Everyone must remember X11 on NG and now in NGX you can create a protocol and uncheck the match for any. If my memory is correct the default behavior for rules is if something does not match any rules its allow. So if I put any any any drop at the end of my rules, does it treat that rule differently because its the last one or not. If not what append to protocol not included in any.

Thanks.

[northlandboy]

Remember that the last rule is an implicit silent drop. That's the reason for the cleanup rule, so that you log all drops.

Since it's a drop ANY, it will match everything, as it won't do any deeper inspection if it gets to that point.