netfilter vs. iptables

[Sascha Reissner]

From: "Jessica Koeppel" <jessica@anticlockwise.com>

[...]

> I was asked by my boss to set up some ipchains. A friend who knows more
> about such things suggested I look at netfilter, since this is newer.
> So I started in, and mentioned I was working with "iptables", and he
> said that while iptables was newer than ipchains, that I really wanted
> netfilter, as this was newest and best. But everything I look at that's
> related to netfilter has me using iptables. 
> 
> So.. what's the relationship between "netfilter" and "iptables"?

ipchains is the kernel 2.2.x packet filtering thing.
iptables is the kernel 2.4.x packet filtering userland tool.
netfilter is the kernel 2.4.x packet filtering kernelspace backend.

so .. you use iptables to manage netfilter *g*

-- 
Sascha Reissner  -  sascha.reissner@toxicnet.de  -  http://www.toxicnet.de/
PGP Fingerprint: 27C4 F5BB E4D7 7B44 A47A  B1E7 6014 F3E5 85B1 BEF7