Netfilter vs. IP Chains

[Matt Bruce]

Having been subscribed to the list for about 30 minutes, I'd say the "Linux
2.4 Packet Filtering HOWTO" off the NetFilter homepage has a few examples,
with one page of possible interest being:

  8. Differences Between iptables and ipchains

http://netfilter.kernelnotes.org/unreliable-guides/packet-filtering-HOWTO-8.
html

No nose tweaking intended. ;)

The primary interest for me in the product is the stateful inspection
capabilities, making Linux capable of performing firewall tasks, rather than
just being a packet filter.

Cya,

Matt Bruce     <matt.bruce@alphawest.com.au>
Security & Internet Engineer
AlphaWest - http://www.alphawest.com.au/
"Illegitimus non carborundum est." :)


>-----Original Message-----
>From: mike [mailto:mike@migratetolinux.com]
>Sent: Thursday, 6 April 2000 11:21 am
>
>How is Netfilter an improvement over IP Chains? What didn't IP
>Chains do that Netfilter can?