Re: netfilter efficiency

[Peter Surda <shurdeek@routehat.org>]

On Thu, Jan 20, 2005 at 06:56:04PM +0100, MauroTablo' wrote:
> Hi all.
hi

> The question is: iptables confronts the TCP packet with all my 90 rules, or
> it confronts the packet ONLY WITH rules for tcp packets (-p tcp)?  In other
> words, is there a function in netfilter that looks up to the protocol type
> of a transit packet and decides which rules to confront the packet with?
You can optimise this like this:
iptables -N tcp
iptables -N udp
iptables -N icmp
iptables -A FORWARD -p tcp -j tcp
iptables -A FORWARD -p udp -j udp
iptables -A FORWARD -p icmp -j icmp
iptables -A tcp my tcp rules
iptables -A udp my udp rules
iptables -A icmp my icmp rules

> Thank you.
> Mauro.
Bye,

Peter Surda (Shurdeek) <shurdeek@routehat.org>, ICQ 10236103, +436505122023

-- 
  Hello, this is Bill Gates and I pronounce Monopoly, er, Windows as Windows.