From: Paul Jakma (paulj at domain itg.ie)
Date: Tue 25 Jul 2000 - 15:25:06 IST
On Tue, 25 Jul 2000, Philip Reynolds wrote:
> Hmm, which specific features are you talking about? There are certainly
> reasons to use ipchains over ipfilter, simple packet filtering for example,
> there's no need for ipfilter, but I'm struggling to think of any options
> ipchains has that ipfilter doesn't.
>
well i'm not too well up on ipfilter, so i wasn't going to claim that
ipchains could do everything it did for fear of reprisals. :)
ipfilter does do tcp connection tracking though, which ipchains doesn't.
(however blocking incoming syn's with ipchains gives you more or less the
same amount of protection).
> Ipfilter doesn't work with a glibc system.
> http://coombs.anu.edu.au/~avalon/ipfilfaq.html#Linux
>
so am i correct in thinking that ipfilter isn't maintained
anymore?
--paulj
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:59 GMT