Hello,
         I want to know why  default firewall policy for INPUT and OUTPUT chain is set to
          ACCEPT.
          This is an insecure policy. The best practice is to set it to 'DROP' by
          default and allow only what is required explicitly.
         Can anyone explain me why default firewall policy for INPUT and OUTPUT chain is set to
          ACCEPT?