Description: In iptables the default policy is applied only after all the applicable rules in the table are examined for a match. Setting the default policy to DROP implements proper design for a firewall, i.e. any packets which are not explicitly permitted should not be accepted. Fix: To set the default policy to DROP (instead of ACCEPT) using iptables for the built-in OUTPUT chain which processes outgoing packets, check and run the following steps: #yum remove -y firewalld #yum install -y iptables iptables-services #systemctl enable iptables #iptables -P OUTPUT DROP #service iptables save Note: In the presence of firewalld package, iptables rules cannot be set as permanent. But removing firewalld package will lead to the removal of all rules currently configured in the machine. So patch is not provided for the rule.

[yes/no]

In 'iptables' the default policy is applied only after all the applicable rules in the table are examined for a match. Setting the default policy to 'DROP' implements proper design for a firewall, i.e. any packets which are not explicitly permitted should not be accepted.