Re: ipchains

[ramakrishna <rk exocore com>]

hi,
> 
> not sure if this is an issue or not, but the "lokkit" and
> "gnome-lokkit" utilities in red hat 7.3 appear to configure
> ipchains, when i'm assuming most folks will be using
> iptables.  this might give users a false sense of security
> after the configuration when, in fact, they really haven't
> locked down anything.
      yes! lokkit configures ipchains and the rules are written in /etc/sysconfig/ipchains
As u have pointed out that most of people will be using iptables. but this doesn't
matter until and unless u have the correct rules-sets applied either in ipchains or
iptables. 
 but on my opinion u should set the iptables(as it provides added features of stateful
packet filtering) and forget about lokkit or even disable the lokkit command

but in case u have iptables set and then fiddle with lokkit .then ipchains will be loaded
but u can always revert back to iptables at any time by just removing the ipchain module
and inserting the iptable module

cheers

-rk-
-------------------------------------------
Ramakrishna        | rk exocore com
Exocore Consulting | http://www.exocore.com
Bangalore, India   | +91 (80) 344-0397
-------------------------------------------