Re: IP tables setup

[Mark Devin <mdevin@ozemail.com.au>]

Rob Zietlow wrote:

> Anyone know of the location of a man or a HOWTO on setting up IPtables for
> the 2.4.X kernel.  I would like to have that setup before I replace IP
> chains and goto the new kernel
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Basically, you just need to compile a 2.4 kernel.  When you do a make menuconfig
it will give you a whole heap of options for netfilter.  I just selected all of
them as modules  (ip_conntrack, ipt_REJECT, ipt_LOG etc etc.)  Then you just
need to apt-get install iptables from "unstable" source.

Once you have that then you just need a firewall script just like for ipchains.
Except the iptables scripts are easier to write and debug.

Here is a discussion of new features with iptables:
http://www.linuxnewbie.org/cgi-bin/ubbcgi/ultimatebb.cgi?ubb=get_topic&f=21&t=001584

And here is a few example firewall scripts:
http://www.linuxnewbie.org/cgi-bin/ubbcgi/ultimatebb.cgi?ubb=get_topic&f=21&t=001582

cheers.

Mark.