> In what sort of world default DROP is not a widespread practice? That's the problem. Instead of asking why you're running services you don't really want to b

> In what sort of world default DROP is not a widespread practice? That's the problem. Instead of asking why you're running services you don't really want to be running, just kill anything you don't understand. It's like over-prescribing antibiotics. You grow a new crop of firewall-resistant services and then the firewall doesn't work when you really need it to.