There is nothing wrong with input, output and forward (that is what I
use). I would think you could make other chains for things like other
interfaces or QoS.
Carric Dooley CNE
COM2:Interactive Media
http://www.com2usa.com
"In theory, there is no difference between theory
and practice. But, in practice, there is. "
- Jan L.A. van de Snepscheut
Do your part for "Jam Echelon Day"!!
These are some of the key words (ref.
http://www.attrition.org/attrition/keywords.html):
Waihopai, INFOSEC, Information Security, Information Warfare, IW, IS,
Priavacy, Information Terrorism, Terrorism Defensive Information, Defense
Information Warfare, Offensive Information, Offensive Information Warfare,
National Information Infrastructure, InfoSec, Reno, Compsec, Computer
Terrorism, Firewalls, Secure Internet Connections, ISS, Passwords, DefCon V,
Hackers, Encryption, Espionage, USDOJ, NSA, CIA, S/Key, SSL, FBI, Secert
Service, USSS, Defcon, Military, White House, Undercover, NCCS, Mayfly, PGP,
PEM, RSA, Perl-RSA, MSNBC, bet, AOL, AOL TOS, CIS, CBOT, AIMSX, STARLAN,
3B2, BITNET, COSMOS, DATTA, E911, FCIC, HTCIA, IACIS, UT/RUS, JANET, JICC,
ReMOB, LEETAC, UTU, VNET, BRLO, BZ, CANSLO, CBNRC, CIDA, JAVA, Active X,
Compsec 97, LLC, DERA, Mavricks, Meta-hackers, ^?
On Fri, 22 Oct 1999, Bennett Samowich wrote:
> Greetings,
>
> This may be a bit of a newbie question...
>
> I have begun to experiment with ipchains and understand that one can create
> a chain for just about anything. For my first attempt, I have taken my
> ipfwadm rules and converted them directly to ipchains.
>
> Question:
> Is there anything "functionally" wrong with putting all the rules in the
> input, output, and forward chains ala ipfwadm?
>
> Other than for organizational purposes, what would be the reason to create
> a new chain? (see first question)
>
> Thanks in advance,
> - Bennett
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]