LPI
202-400 · Question #50
When the default policy for the iptables INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
The correct answer is D. Some applications use the localhost interface to communicate with other applications. See the full explanation below for the reasoning.
Question
When the default policy for the iptables INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
Options
- AAll traffic to localhost must always be allowed.
- BIt doesn't matter; iptables never affects packets addressed to localhost
- CSendmail delivers emails to localhost
- DSome applications use the localhost interface to communicate with other applications.
- Esyslogd receives messages on localhost
How the community answered
(16 responses)- B13% (2)
- C6% (1)
- D75% (12)
- E6% (1)
Community Discussion
No community discussion yet for this question.