IPtables - General - Default Policy

Firewall support in based on the NetFilter, a raw framework for filtering and mangling packets, included in the standard Linux kernel. You can learn more about NetFilter on the official project site, http://netfilter.samba.org/. IPtables package is used to build the firewall on this framework, and it is possible to extend iptables functionality over your virtual server.

- General
- Default Policy

General Settings - Save/Restore IPtables Rules

All changes made to firewall configuration take effect immediately. However, to make them working after virtual server restart, it is necessary to save them in a file. To this effect, click 'Save to File' button.

Note that it is impossible to upload the firewall configuration from an arbitrary file. You can only restore the previously saved firewall configuration from the default file.

To restore the saved firewall configuration, click the 'Restore from file'.

Default Policy

IPtables is used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel. Several different tables may be defined. Each table contains a number of built-in chains and may also contain user-defined chains. Each chain is a list of rules which can match a set of packets. A firewall rule specifies a criteria for a packet, and a target (what to do with the packet that matches a criteria: one of the special values: ACCEPT or DROP). If the packet does not match, the next rule in the chain is examined; if it does match, then rule that specified by the value of the target is used; if a packet matches no rules, then the default policy is applied.

Here you can select the packages management rules applied in the case if all other rules do not match. To this effect, click 'Edit' and select one of the special values: ACCEPT or DROP both for incoming packets (Input chain) and outgoing packets (Output chain).