When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
When the default policy for the netfilter INPUT chain is set to DROP, why should a rule allowing traffic to localhost exist?
When the default policy for the netfilter INPUT chain is set to DROP, allowing traffic to localhost is essential because some applications use the localhost interface to communicate with other applications. Without this rule, inter-application communication on the same machine that relies on the localhost might be disrupted, causing various issues in operation and functionality.
C is correct