Offline defensive configuration review
Firewall Policy Review
Policy: iptables-save IPv4 filter INPUT
3Rules reviewed
2Review findings
| Priority | Rule | Finding | Review guidance | Earlier rules | Overlap example |
|---|---|---|---|---|---|
| HIGH | INPUT:L8 | UNRESTRICTED_ADMIN_SOURCE | TCP/3389 is allowed from all IPv4 addresses; review source restrictions. | — | — |
| INFO | INPUT:L8 | PARTIALLY_SHADOWED_RULE | Earlier terminating INPUT rules match part, but not all, of this rule's traffic; review redundant matches and rule order. | INPUT:L6; INPUT:L7 | 0.0.0.0/1 → 0.0.0.0/0 (tcp/3389) |
Scope: Exact single/combined shadowing and partial overlap checked for supported IPv4 INPUT; real reachability not evaluated