I'm really slow in replying, but I recommend you do both.  After all, we should always be doing security in layers, right?  Without the default listen rule, what happens when you add a second IPv6 address or enable IPv6?<br> <br><div class="gmail_quote">On Tue, Nov 4, 2008 at 12:54 PM, Nicholas Kwiatkowski <span dir="ltr"><<a href="mailto:kwiatk27@msu.edu">kwiatk27@msu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Why not just bind the web server to <a href="http://127.0.0.1:80" target="_blank">127.0.0.1:80</a> instead of <a href="http://0.0.0.0:80" target="_blank">0.0.0.0:80</a>  ??<br> <br> -Nick Kwiatkowski<br>  MSU Telecom Systems<br> <div><div></div><div class="Wj3C7c"><br> -----Original Message-----<br> From: <a href="mailto:linux-user-bounces@egr.msu.edu">linux-user-bounces@egr.msu.edu</a> [mailto:<a href="mailto:linux-user-bounces@egr.msu.edu">linux-user-bounces@egr.msu.edu</a>]<br> On Behalf Of Karl Schuttler<br> Sent: Tuesday, November 04, 2008 11:57 AM<br> To: <a href="mailto:linux-user@egr.msu.edu">linux-user@egr.msu.edu</a><br> Subject: [GLLUG] iptables rules<br> <br> Hello all; I have a server that I want to enable access to port 80 to<br> only through loopback (I want to force the user to ssh port forward<br> instead of hitting it through the web. I currently am dropping inbound<br> port 80 packets, which also disables my ability to port forward. What<br> do i need to do to make this work; add an allow rule for loopback or<br> something?<br> _______________________________________________<br> linux-user mailing list<br> <a href="mailto:linux-user@egr.msu.edu">linux-user@egr.msu.edu</a><br> <a href="http://mailman.egr.msu.edu/mailman/listinfo/linux-user" target="_blank">http://mailman.egr.msu.edu/mailman/listinfo/linux-user</a><br> <br> _______________________________________________<br> linux-user mailing list<br> <a href="mailto:linux-user@egr.msu.edu">linux-user@egr.msu.edu</a><br> <a href="http://mailman.egr.msu.edu/mailman/listinfo/linux-user" target="_blank">http://mailman.egr.msu.edu/mailman/listinfo/linux-user</a><br> </div></div></blockquote></div><br>