firehol-policy(5)

📦
version 3.1.8 · 4 versions
, in debian trixie, ubuntu resolute, ubuntu stonking

💖 firehol-policy — bestie edition 💖

okay so this is the manual page for firehol-policy(5), from the FireHOL fam (version 3.1.8, if you're keeping score 👑). it's short, it's sweet, and it's kinda important, so let's get into it 🫶

✨ NAME ✨

firehol-policy — sets the default action for an interface or a router, no cap 💅

🌸 SYNOPSIS 🌸

policy action

🦋 DESCRIPTION 🦋

so like, the policy subcommand is the one that sets the default policy for an interface or a router. it's literally the vibe check for "what happens to traffic that didn't match any of my other rules" ✨

the action can be any of the actions listed over in firehol-actions(5). all of them. go wild (but responsibly, bestie 😭).

note note note 📝 — only change the default policy of a router if you clearly understand what's gonna be matched by the router statement whose policy you're changing. like, genuinely understand it. not "eh, probably fine" understand it.
it is common to define overlapping router definitions, and changing the policy to anything other than the default return may cause strange results for your configuration. the router overlap is not a vibe, it's a hazard 🙈
WARNING 🚨🚨 — do not set a policy to accept unless you fully trust every single host that can reach the interface. every one. and hear me on this: FireHOL CANNOT be used to create valid "accept by default" firewalls. it's not a skill issue, it's just not what it does, periodt 💀

🎀 EXAMPLE 🎀

interface eth0 intranet src 192.0.2.0/24
  # I trust this interface absolutely
  policy accept

see that comment? # I trust this interface absolutely — that's the energy you need before you type accept. absolute trust. main character trust. nothing less 🔥

🌈 SEE ALSO 🌈

👑 AUTHORS 👑

FireHOL Team. (icons, the lot of them 💜)

okay that's the whole page bestie, you ate it up 🍓 this was the FireHOL Reference, built 13 Apr 2025, and you just read firehol-policy(5) — go set those policies, stay safe, and remember: never accept by default, iykyk 😭✨🧚

📦 where this page comes from