firehol-policy - set default action for an interface or router
policy subcommand defines the default policy for an interface or router.
The action can be any of the actions listed in firehol-actions(5).
Change the default policy of a router only if you understand clearly what will be matched by the router statement whose policy is being changed.
It is common to define overlapping router definitions. Changing the policy to anything other than the default
returnmay cause strange results for your configuration.
Do not set a policy to
acceptunless you fully trust all hosts that can reach the interface. FireHOL CANNOT be used to create valid "accept by default" firewalls.
interface eth0 intranet src 192.0.2.0/24 # I trust this interface absolutely policy accept