Commits

Zhang Huangbin committed 232569d

Adjust rule order: loop device first.

Comments (0)

Files changed (1)

iRedMail/samples/iptables.rules

 # Keep state.
 -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 
+# Loop device.
+-A INPUT -i lo -j ACCEPT
+
 # http/https, smtp/smtps, pop3/pop3s, imap/imaps, ssh
 -A INPUT -p tcp -m multiport --dport 80,443,25,465,110,995,143,993,587,465,22 -j ACCEPT
 
-# Loop device.
--A INPUT -i lo -j ACCEPT
-
 # Allow PING from remote hosts.
 -A INPUT -p icmp --icmp-type echo-request -j ACCEPT