man, 2002-04-29 kl. 10:17 skrev Karl Fischer:

> I remember reading something about filtering in PREROUTING CHAINS,
> however, unfortunately I can't find it anymore ...

> Somebody said that it's not recommended to filter in PREROUTING,
> it's recommended to filter in input/forward instead ...

> Is there any truth in it?
> Any reason?

Neither NAT, PROUTING or POSTROUTING.

You'll find the reasoning at:

http://www.linuxsecurity.com/resource_files/firewalls/IPTables-Tutorial/iptables-tutorial/iptables-tutorial.html

... and many other sources, I suspect.

Tony

-- 

Tony Earnshaw

e-post:         [EMAIL PROTECTED]
www:            http://www.billy.demon.nl
gpg public key: http://www.billy.demon.nl/tonni.armor

Telefoon:       (+31) (0)172 530428
Mobiel:         (+31) (0)6 51153356

GPG Fingerprint = 3924 6BF8 A755 DE1A 4AD6 FA2B F7D7 6051 3BE7 B981
3BE7B981


Attachment: signature.asc
Description: Dette er en digitalt signert meldingsdel

Reply via email to