Re: firewalls and masquerading

["Mike Chambers" <mike netlyncs com>]

----- Original Message -----
From: "Michael George" <george mintcity com>
To: <seawolf-list redhat com>
Sent: Saturday, June 30, 2001 7:15 AM
Subject: firewalls and masquerading


> I was reading through documentation while rebuilding the kernel and it
seems
> that iproute2 is the "new and improved" way to do firewalling and
> masquerading.  Is that assessment correct, or am I off to the wrong start?
>
> While trying to make selections for rebuilding the kernel I noticed a lot
of
> different options for 2.4 w.r.t. network adress translation.  I looked at
the
> IP-Masquerade HOWTO, and it doesn't have info up to date for the 2.3.x and
> 2.4.x kernels.
>
> I've looked on the standard install of seawolf and I see that I have
> installed: iptables (which was replaced by ipchains, IIRC), ipchains
(which I
> used when I learned the masq stuff w/ the 2.2 kernel reading the IP-Masq
> HOWTO), and iproute (which seems to be the new way).

Use iptables as it has much more functionality then ipchains.  If you use
iptables, make sure you remove the ipchains module first with rmmod ipchains
then take out the ipchains service from all runlevels such as
chkconfig --level 2345 ipchains off.  Here's the homepage for it.

http://netfilter.samba.org/

Hope this helps,

Mike