IPCHAINS vs. IPTABLES

sancho5 · 08-24-2001, 03:39 PM

Folks,

I've read that iptables is basically a replacement for ipchains, and besides new syntax for some of the arguments, not much else differs. Another source has told me that there is quite a bit else different between the two, and it would be important to know the difference. Can someone expound on this?

I also wanted to know, given a P133 box w/16 MB RAM, would the best idea for a simple firewall be with iptables or chains? Any other tips?

I have checked into frazierwall, a floppy-loadable firewall "distro", and find it interesting... can anyone else recommend a good lightweight firewall package, or a configuration that will give an optimized kernel config for supporting firewall and IPmasq?

DocKane · 08-24-2001, 10:52 PM

maybe check the LRP : i dont know if your router distrib is from
the LinuxRouterProject but this based on debian :

www.linuxrouter.org

and im reading the Advanced Linux Howto !
maybe you can find awnsers to your topic there:

http://www.linuxdoc.org/HOWTO/Adv-Routing-HOWTO.html

if this doesn´ help forgive a newbie

sancho5 · 08-25-2001, 12:12 AM

Not at all - thanks for the pointers.

DJFauß · 08-25-2001, 03:27 PM

Iptables is quite a bit faster and more efficient (else why replace ipchains)

additionally it features 1:1 NAT ... ipchains doesn''t do that ..

sancho5 · 08-25-2001, 03:49 PM

Cool - I appreciate the responses.
For anyone else tuning in and interested in the topic, there is a *great* article on IPTABLES (netfilter) and the benefits it brings to the board.
Check out http://www.securityportal.com/cover/...y20010122.html

Ript · 08-26-2001, 08:01 PM

I am currently using Coyote linux on a 486dx4-100, a netgear fa310tx (lan) and a ether express pro (wan). I simply created a disk, and booted it and it works, altho not the most secure, it worked without any tweaking. I currently looking at Freesco and BBIagent because they both feature web bases interface, and fit on 1 floppy!

BBIagent website:
http://www.bbiagent.net/en/

Freesco website
http://www.freesco.org/

there are others, incliding LRP but I was looking for somthing I didnt have to mess with. my 3 clients PC's are all windows only except for mine wich is tripple boot, win2k, rh 7.1 and win98