On 22 Jul 2001, Bob Nielsen wrote: > 2.0.x kernels do not use ipchains, but use ipfwadm instead.
Aha! Wonderful, thanks. Yes, I just read the Firewall HOWTO which says: The bilt in Linux firewall have changed several times. If you are using an old Linux kernel (1.0.x or older) geta new copy. These older used ipfwadm from http://www.xos.nl/linux/ipfwadm/ and is no longer supported. The last sentence of which I read as meaning kernels 1.0.x and earlier used ipfwadm, and anything later uses ipchains, but it goes on to say: If you are using 2.2.13 or newer you will be using ipchaining as developed by http://www.rustcorp.com/linux/ipchains/ which does indeed suggest I should not be using ipchains. Quite why I have the ipchains stuff installed, however, is a mystery. > Upgrading > is definitely in order, however. Its on the list. Generally I don't like to upgrade unless there is a compelling reason to (one reason to use Linux is to escape the "bigger! better! faster!" M$ mentality, at least for me). However to upgrade over the 'net I first need a firewall... Will look more closely at ipfwadm this evening, thanks Bob and everyone else who responded. -- Gary Debian 2.1r4 (kernel v2.0.39); XFree86 3.3.6 Thinking is the hardest work there is, which is the probable reason why so few engage in it. (Henry Ford)