Re: latest firewall tools for linux

["Volker Tanger" <Volker.Tanger () globalone net>]

Greetings!

Roelof JT Jonkman wrote:

> Just for clarification I guess, but OpenBSD uses Darren Reed's Ipfilter package
> which maintains tcp state, and therefore allows you to deny certain things
> pending on the state of the tcp connection. Whereas stock linux with ipchains
> is a packetfilter, and it doesn't quite allow you to deny exactly everything.

For the new linux kernel (2.4 including 2.4pre.. = 2.3.99pl..) there is a change
from IPchains to Netfilter / IPtables  (http://netfilter.kernelnotes.org/), which is
a stateful packet filter, too.

Bye
    Volker

Attachment: volker.tanger.vcf
Description: Card for Volker Tanger