Changing iptable policy

All,

I am trying to use set up a syslog server to capture syslog events
outside a firewall. So, I am using Redhat 9.0
(Linux version 2.4.20-8) and IPTABLES to prevent unwanted access. The
issue I am having is changing the policy.

I want to create a new chain and have the policy to changed to DROP.
Each time I enter the command iptables -P FIRE DROP, I get the
following error message: iptables: Bad built-in chain name

However, if I change one of the default chains of INPUT, FORWARD or
OUTPUT with the command iptables -P INPUT DROP, the command is
accepted. What am I missing?

(E-Mail Removed)

tjcreek55 wrote:
> I want to create a new chain and have the policy to changed to DROP.
> Each time I enter the command iptables -P FIRE DROP, I get the
> following error message: iptables: Bad built-in chain name
>
> However, if I change one of the default chains of INPUT, FORWARD or
> OUTPUT with the command iptables -P INPUT DROP, the command is
> accepted. What am I missing?

User-defined chains cannot have policies.

See
man iptables

You should add a catch-all rule to the end of your chain.
iptables -A FIRE DROP

YAMABANA Kengou
Gifu, Japan