|
|
|
Order is important. If you specify a general rule first and then a more specific rule for the same port later, the general rule will override the more specific rule, which will be ignored.
For example, if you deny access to a port for all hosts and then later permit access to that port for an individual host, the second, more specific rule will never be applied. The more general rule denying access to all hosts will prevail, because it was applied to the incoming packet first. The packet will never be tested against the second, more specific command.
Conversely, if you enter a rule allowing access to a specific host first and then enter the rule denying access to all hosts, the host explicitly identified by the first rule will be allowed access to the interface. The second, more general rule will be applied to all packets not handled by the first rule.
|
|
|