Cleanest way to deal with loopback interface?

Jason Opperisano opie at
Thu Apr 14 03:35:25 CEST 2005

On Wed, Apr 13, 2005 at 04:57:53PM -0700, Christian Seberino wrote:
> Thank you very much!
> Are you saying that there is no reason for firewalls to check for and
> drop packets addressed to and from because Linux TCP stack
> already drops those automatically?  I didn't know source IP addresses
> were checked by default.  This is almost like a built in 'always on'
> firewalling on Linux!?
> In other words, if I tried to spoof packets to your LAN from,
> they would never get through even with no firewalls?

yeah--somewhere around line 1434 of:


on the machine i'm looking at.


"Chris: Hi, my name is Chris. Mom and dad said that I'm supposed to be
 on my best behavior tonight and not say "poop". Oh god. What have I
        --Family Guy

More information about the netfilter mailing list