mangle, nat: what policy if I'm not using them?

I'm setting up a host-based firewall for a host sitting on a LAN, using
iptables.

If I'm not using mangle or nat, what should the policy for those tables be?
ACCEPT or DENY?

jqpx37 wrote:
> I'm setting up a host-based firewall for a host sitting on a LAN, using
> iptables.
>
> If I'm not using mangle or nat, what should the policy for those tables be?
> ACCEPT or DENY?

Policies are applied per chain, not per table.
The default for all the chains in mangle and nat is accept.
If you're not using mangle and nat, just leave them alone.