On Sat, Jul 21, 2001 at 10:10:26PM -0700, Jack Bowling wrote:
> On Sun, 22 Jul 2001 13:48:22 +1000 (EST)
> "Andrew Smith" <[EMAIL PROTECTED]> wrote:
> 
> > Hi,
> > I keep hearing this (and this is a simple
> > example of why iptables appears to be
> > better) but has anyone got a link or a
> > reasonably detailed opinion of why iptables
> > is better and the differences between
> > ipchains and iptables?
> <snip>
> 
> Just one among many reasons: connection tracking. Makes your life a
> whole lot easier.

Some things that come to mind also:

-more flexible logging
-more access control mechanisms: by MAC address and UID (IIRC)
-rate limiting
-new targets like the QUEUE target, that allows exporting packets to
user space for further analysis or action.

-- 
Hal B
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 Spamtrap: [EMAIL PROTECTED] and [EMAIL PROTECTED]
--



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to