[PATCH] Warn people that ipchains and ipfwadm are going away.

William Stearns wstearns at pobox.com
Wed Sep 22 18:27:59 CEST 2004


Good day, all,
	[CC list snipped]

> > > I guess I'll have to convert 1340 lines of ipchains commands to
> > > iptables -yech!
> >
> > 	I have a script that does a first pass of converting an ipchains
> > firewall script to an iptables firewall script at
> >
> > http://www.stearns.org/i2i/ipchains2iptables
> > http://www.stearns.org/i2i/ipchains2iptables.README
> >
> > 	Because of architectural differences between the two firewall
> > technologies it can't produce a perfect translation, but it does handle
> > most of the grunt work.
> 
> Thanks. I just wrote a 10-line 'C' program to do it. Just changes
> "ipchains" to "iptables" and removes "-y". I had to add the
> create command on the first line, simple. Thanks -all.

	If that works for you, great, but depending on your firewall 
structure there are more differences between the two than simply replacing 
ipchains with iptables.
	Cheers,
	- Bill

---------------------------------------------------------------------------
	"Decisive action in the hour of need
	denotes the hero but does not succeed."
	-- Marion D. Hutchins
(Courtesy of Kate Bates)
--------------------------------------------------------------------------
William Stearns (wstearns at pobox.com).  Mason, Buildkernel, freedups, p0f,
rsync-backup, ssh-keyinstall, dns-check, more at:   http://www.stearns.org
--------------------------------------------------------------------------



More information about the netfilter-devel mailing list