Re: IPChains rules

["Stephen J. Turnbull" <turnbull@example.com>]

>>>>> "Tobias" == Tobias Diedrich <ranma@example.com> writes:

    Tobias> iptables also has the advantage of being a "stateful"
    Tobias> packet-filter, which can make the rules much simpler (in
    Tobias> case of a firewall you might basically just say "allow all
    Tobias> traffic from lan to the outside and allow only known
    Tobias> existing incoming connections")

This kind of thing can be done with ipchains, too.  It's just (AFAIK)
that iptables has more convenient operators for doing what you want.

-- 
University of Tsukuba                Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
Institute of Policy and Planning Sciences       Tel/fax: +81 (298) 53-5091
_________________  _________________  _________________  _________________
What are those straight lines for?  "XEmacs rules."