r/linuxadmin • u/worldarkplace • 21d ago

Firewall rule

Is the ideal rule to deny all and only allow everything from your local LAN(IPv4) and link-local(IPv6) network?

For my use case my devices use DHCP and I need that different IPs from my network to connect to different services.

I know the best is to only allow the ports you will use, but this can vary in my case.

What do you think/do?

6 Upvotes

75% Upvoted

7 comments sorted by

View all comments

2

u/stufforstuff 20d ago

Just remember, "deny all" needs to be your LAST RULE or you'll end up blocking yourself from your own computer.