/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
David A. Ranch wrote:
> >2.3.x/2.4.x has support for ipchains. You can use the new interface
> >(preferred) or you can load module ipchains.o and continue
> to use your
> >existing rules. Mixing the two is bad magic and I will not
> be responsible
> >if you turn into a frog. :)
>
> Thats a bummer it won't co-exist. For those of you out there
> that haven't
> heard, the new IPTABLES subsystem will even take old IPFWADM commands
> too!
[Before I forget not everyone knows what we're talking about.]
The new control program is called netfilter
(http://netfilter.kernelnotes.org)
There are already HOWTOs for ipnatctl (NAT, masq and portforwarding),
iptables (packet filtering) and a netfilter hacking HOWTO which I haven't
worked my way through yet.
There is also got a quick start written at
http://netfilter.kernelnotes.org/QUICKSTART if you want to try out a working
config before you write one out yourself.
[I always love seeing how someone has done it before I plan my own.]
> So what do think people, should the IP Masq HOWTO be extended
> to support IPTABLES or should we start a whole new HOWTO?
I'd recommend splitting the Masq HOWTO. You start covering all 3 configs
and you'll quickly lose newbies who just want to look at what they need to
setup on the kernel they are using.
> The reason why I'm concerned
> about this is because IPTABLES might have a complete different behavior
> (quirks, etc) and the old MASQ module support might be very different.
I'd put my money on it. The move to netfilter is going to be a much bigger
change than the move to ipchains was.
Lourdes
(off to find my first dose of caffeine for the day.)
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
