Offline defensive configuration review
Firewall Policy Review
Policy: iptables-save IPv4 filter INPUT
2Rules reviewed
1Review findings
| Priority | Rule | Finding | Review guidance | Earlier rules | Overlap example |
|---|---|---|---|---|---|
| INFO | INPUT:L5 | PARTIALLY_SHADOWED_RULE | Earlier terminating INPUT rules match part, but not all, of this rule's traffic; review redundant matches and rule order. | INPUT:L4 | 10.0.0.128/25 → 0.0.0.0/0 (tcp/85:90) |
Scope: Exact single/combined shadowing and partial overlap checked for supported IPv4 INPUT; real reachability not evaluated