about bridge firewall

about bridge firewall

[SB CH]

Hello, all.

As you know, I heard that bridge is more speedy than NAT method, right?
so I would like to setup brideg firewall using iptables.
then, Do you know that any good reference or documents about bridge 
firewall using iptables?(As I know, the bridge firewall is availabe only 
ipchains.)

Always so thanks in advance. ;)




_________________________________________________________________
전 세계 어디서나 모든 PC에서 내 PC처럼 사용할 수 있는 온라인상의 하드, MSN 
웹하드를 클릭하세요. http://msn.webhard.co.kr

Re: about bridge firewall

[Kjetil Andreas Laasby]

NAT and bridge are working on different levels in the IP stack - so
you can't compare them like that. Bridges are faster, yes, because
they work at level 2, NAT works at level 3 + an extra header.

If you want to explore netfilter and bridges, check out from the 
"Ethernet Bridge+Netfilter HOWTO". One link is :
http://www.think-future.de/DOCUMENTATION/Ethernet-Bridge-netfilter-HOWTO/Ethernet-Bridge-netfilter-HOWTO.html


Cheers,
Kjetil Laasby


> 
> Hello, all.
> 
> As you know, I heard that bridge is more speedy than NAT method, right?
> so I would like to setup brideg firewall using iptables.
> then, Do you know that any good reference or documents about bridge 
> firewall using iptables?(As I know, the bridge firewall is availabe only 
> ipchains.)
> 
> Always so thanks in advance. ;)
> 
> 
> 
> 
> _________________________________________________________________
> 전 세계 어디서나 모든 PC에서 내 PC처럼 사용할 수 있는 온라인상의 하드, MSN 
> 웹하드를 클릭하세요. http://msn.webhard.co.kr
> 
> 

Re: about bridge firewall

[Jesse Keating]

On Mon, 14 Oct 2002 01:16:16 +0000
"SB CH" <chulmin2@hotmail.com> wrote:

# As you know, I heard that bridge is more speedy than NAT method,
# right? so I would like to setup brideg firewall using iptables.
# then, Do you know that any good reference or documents about bridge 
# firewall using iptables?(As I know, the bridge firewall is availabe
# only ipchains.)

bridge.sourceforge.net

-- 
Jesse Keating
j2Solutions.net
Mondo DevTeam (www.mondorescue.org)

Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=jkeating