iptables support this?

iptables support this?

[Augusto Flavio]

Hi,


The IPTables support some like 500 rules? 
The performance fail much?


Tkz!


Augusto Flavio

_______________________________________________________________________
Yahoo! Mail
Mais espaço, mais segurança e gratuito: caixa postal de 6MB, antivírus, proteção contra spam.
http://br.mail.yahoo.com/

Re: iptables support this?

[Shawn]

Performance no fail much, but you fail to mention how it is all
organized. Not that it should matter much with modern CPUs. How many
sequential steps in the path you're worried about? 500? That would be
just silly.

I'm guessing you have different rules for different IP or IP range
matches. No big deal.

Keep in mind if you're that worried about speed, maybe you ought to
think about making your routing and firewalling separate.


On Fri, 2003-07-18 at 09:55, Augusto Flavio wrote:
> Hi,
> The IPTables support some like 500 rules? 
> The performance fail much?
> 
> 
> Tkz!

RE: iptables support this?

[George Vieira]

I had at one stage about 500+ rules and had no performance lose on a 2MB
HDSL link using a Pentium 2 300Mhz server.. I was actually shocked.. ;)
It was more services running on that box that lagged ie. transparent proxy,
mail gateway, etc.. but not iptables..

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Augusto Flavio
Sent: Saturday, July 19, 2003 12:55 AM
To: netfilter@lists.netfilter.org
Subject: iptables support this?


Hi,


The IPTables support some like 500 rules?
The performance fail much?


Tkz!


Augusto Flavio

_______________________________________________________________________
Yahoo! Mail
Mais espaço, mais segurança e gratuito: caixa postal de 6MB, antivírus,
proteção contra spam.
http://br.mail.yahoo.com/