LinuxSA Mailing list archives

  From: Andrew Reid <andrew.reid@plug.cx>
  To  : Michael Neuling <Michael.Neuling@keyworks.com.au>
  Date: 28 Jun 2001 09:06:02 +0930

Re: Firewall Accounting

On 27 Jun 2001 21:30:06 +0800, Michael Neuling wrote:

> IPtables is much simpler (the idiots who did IPChains wouldn't know
> their ass from a firewall).  If you are using IPTables then just put a
> rule in the forward chain matching packets going to each of the
> internal machines.  

Simpler, No. More powerful and feature packed, Yes.

The people who did IPChains aren't idiots. They did a reasonable job.
Sure, IPChains had its faults, but I'm sure you'd not be smiling if
you'd written the packet filter.

   - andrew

--
void signature () {
	cout << "Andrew Reid -- andrew.reid@plug.cx" << endl ;
	cout << "Cell: +61 401 946 813" << endl;
	cout << "Quidquid latine dictum sit, altum viditur" << endl;
}

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject