From: Kjetil Andreas Laasby <list@laasby.com>
To: SB CH <chulmin2@hotmail.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: about bridge firewall
Date: 14 Oct 2002 08:45:46 +0200 [thread overview]
Message-ID: <1034577946.30258.27.camel@Wiggum> (raw)
In-Reply-To: <F189nwO1VwJhnD0Ez860000b8a7@hotmail.com>
NAT and bridge are working on different levels in the IP stack - so
you can't compare them like that. Bridges are faster, yes, because
they work at level 2, NAT works at level 3 + an extra header.
If you want to explore netfilter and bridges, check out from the
"Ethernet Bridge+Netfilter HOWTO". One link is :
http://www.think-future.de/DOCUMENTATION/Ethernet-Bridge-netfilter-HOWTO/Ethernet-Bridge-netfilter-HOWTO.html
Cheers,
Kjetil Laasby
>
> Hello, all.
>
> As you know, I heard that bridge is more speedy than NAT method, right?
> so I would like to setup brideg firewall using iptables.
> then, Do you know that any good reference or documents about bridge
> firewall using iptables?(As I know, the bridge firewall is availabe only
> ipchains.)
>
> Always so thanks in advance. ;)
>
>
>
>
> _________________________________________________________________
> 전 세계 어디서나 모든 PC에서 내 PC처럼 사용할 수 있는 온라인상의 하드, MSN
> 웹하드를 클릭하세요. http://msn.webhard.co.kr
>
>
next prev parent reply other threads:[~2002-10-14 6:45 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-10-14 1:16 about bridge firewall SB CH
2002-10-14 6:45 ` Kjetil Andreas Laasby [this message]
2002-10-14 7:14 ` Jesse Keating
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1034577946.30258.27.camel@Wiggum \
--to=list@laasby.com \
--cc=chulmin2@hotmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.