policy command: sanewall-policy

5
sanewall-policy

sanewall-policy

set default action for a definition

        policy
        action

## Description

The `policy` subcommand defines the default policy for an interface or router.

The `action` can be any of the actions listed in ref-actions.

Change the default policy of a router only if you understand clearly what will be matched by the router statement whose policy is being changed.

It is common to define overlapping router definitions. Changing the policy to anything other than the default `return` may cause strange results for your configuration.

Do not set a policy to `accept` unless you fully trust all hosts that can reach the interface. Sanewall CANNOT create valid "accept by default" firewalls. See this FireHOL bug report for some more information and history.

## See Also

- sanewall
- sanewall.conf
- def-interface
- ref-actions