[olug] firewall

[Phil Brutsche]

Quoting Jon <thechunk at thechunk.dhs.org>:

> does anyone use ipchains or iptables as a firewall?

Yes

> If you do I have some quick questions.  How do you log addresses of people 
> who attempt connections.

ipchains:

  ipchains -A input <filter specification> -l -j DENY

iptables:

  iptables -A INPUT <filter specification> -j LOG
  iptables -A INPUT <filter specification> -j REJECT

> Is iptables easy to go to from ipchains?

iptables is similar enough that it's easy to go back and forth

> Is iptables superior to ipchains?

Yes.  Mostly in the statefull filtering department :)


Phil

---------------------------------------------------------------------
To unsubscribe, e-mail: olug-unsubscribe at bstc.net
For additional commands, e-mail: olug-help at bstc.net