[ale] Ipchain/IpTable
Ryan
matty91 at bellsouth.net
Mon Sep 2 13:04:38 EDT 2002
Could someone repost Bob Toxen's slides? I missed the talk also :(
>
> On Sun, 2002-09-01 at 16:31, James P. Kinney III wrote:
> > There are some big syntax differences between the two version. Also,
> > there was an ALE meeting (that I missed :( ) where Bob Toxen discussed
> > the differences and, ultimately, why ipchains is, in several repsects, a
> > better solution that iptables. I believe there was a posting of the talk
> > slides on the ALE list.
> >
> > I have used iptables since it was early. There was a specific feature
> > that I needed (a WORKING packet marking process) that ipchains just
> > couldn't do at that time.
> >
> > But for a basic "deny all but let in a few ports we like" firewall, both
> > systems will be just fine. It's not until you want to tinker with the
> > esoterica of packet mangling and logging and user-space packet access,
> > then you will need a more in-depth look at the differences. On that
> > note, I would point out that Rusty Russel, author of both ipchains and
> > iptables, has announced that iptables is the "official" process now.
> > Ipchains is in maintenance mode, so no new features.
> >
> > On Sun, 2002-09-01 at 14:14, David Corbin wrote:
> > > I have a linux firewall/router that's been running the 2.2 family of
> > > kernels for a long time. For other reasons, I'm upgrading to 2.4. It
> > > appears that 2.4 supports ipchains OR iptables. My question is, what's
> > > the benefit to using iptable over ipchains? Why should I convert?
> > >
> > > Thanks
> > > David
> > >
> > >
> > >
> > >
> > >
> > > ---
> > > This message has been sent through the ALE general discussion list.
> > > See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
> > > sent to listmaster at ale dot org.
> > --
> > James P. Kinney III \Changing the mobile computing world/
> > President and CEO \ one Linux user /
> > Local Net Solutions,LLC \ at a time. /
> > 770-493-8244 \.___________________________./
> >
> > GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
> > <jkinney at localnetsolutions.com>
> > Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
> >
> >
>
>
---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
sent to listmaster at ale dot org.
More information about the Ale
mailing list