What exactly are the security implications of ufw DEFAULT_FORWARD_POLICY “ACCEPT”?

3

I found this question asked on Serverfault, but the answer just provided alternatives instead of actually detailing the implications. I had to set DEFAULT_FORWARD_POLICY to "ACCEPT" to be able to connect to my docker applications, even behind an nginx reverse proxy. However, it seems to still be secure as trying to access said apps by http://droplet-ip:app-port won't work while http://app-domain does. Are there any serious repercussions to having DEFAULT_FORWARD_POLICY "ACCEPT"?

ROODAY

Posted 2016-04-15T20:08:59.807

Reputation: 31

You should submit a comment to the author of the answer asking them to clarify their answer. – Ramhound – 2016-04-15T20:17:39.150

No answers