IPChains

IPChains

[Kevin W. Gagel]

Has all support been dropped for ipchains?

Is there a need to change from ipchains to iptables?

====================
Kevin W. Gagel
Network Administrator
(250) 561-5848 local 448
(250) 562-2131 local 448

--------------------------------------------------------------
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
--------------------------------------------------------------

Re: IPChains

[Cedric Blancher]

Le jeu 29/04/2004 à 19:45, Kevin W. Gagel a écrit :
> Has all support been dropped for ipchains?

ipchains support has been dropped from 2.6 kernels.

> Is there a need to change from ipchains to iptables?

As it is not supported since 2.4, I would say yes.
Regarding Netfilter's functionnalities, opposed to ipchains ones, I
would say DE-FI-NI-TLY yes. Stateful filtering is a major improvement,
for both security and ease of ruleset writing (once understood), and NAT
capabilities are far behond what ipchains can do (all NAT forms
supported), not to mention all available matches and targets, mangle
stuff and existing extensions such as l7-filter.

So, imho, the question would be, is there any need to stay with ipchains
on new kernels ? Except lazyness of course :)


-- 
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!

ipchains

[Partha Bag]

Dear Sir,

  I am using RedHat 7.2.4.10. When I remove ipchains
using rpm -e ipchains, it is not removed and it give
the message that there are dependencies in lokkit.

  In interactive mode during startup, iptables service
starts, but I do not see anything when I use lsmod.

  Please help me to sort out the problem. 

  Thanks & regards.
  
   psbag



		
__________________________________ 
Discover Yahoo! 
Get on-the-go sports scores, stock quotes, news and more. Check it out! 
http://discover.yahoo.com/mobile.html

ipchains

[Ted Gervais]

I just ran into something odd. To me anyways, it was odd.
I just installed and brought up kernel 2.4.5 and my ipchains failed.
So I upgraded to the latest (that I could find) ipchains-1.3.10, and
that also fails.

Has anyone got any version of ipchains to work with the new(er) kernels?

---
Doubt is not a pleasant condition, but certainty is absurd.
                -- Voltaire
                
Ted Gervais <ve1drg@ve1drg.com>
44.135.34.201 linux.ve1drg.ampr.org

Re: ipchains

[Fabian Arias]

ronto:~# uname -r
2.4.5-ac15
ronto:~# ipchains --version
ipchains 1.3.10, 1-Sep-2000
ronto:~# ipchains -L
Chain input (policy ACCEPT):
target     prot opt     source                destination           ports
DENY       all  ----l-  pD951B780.dip.t-dialin.net anywhere
n/a
DENY       all  ----l-  CM-46-30.chello.cl   anywhere              n/a
DENY       all  ----l-  199.103.178.1        anywhere              n/a
......

Are you shure you get it right into the kernel?.

On Mon, 18 Jun 2001, Ted Gervais wrote:

> I just ran into something odd. To me anyways, it was odd.
> I just installed and brought up kernel 2.4.5 and my ipchains failed.
> So I upgraded to the latest (that I could find) ipchains-1.3.10, and
> that also fails.
> 
> Has anyone got any version of ipchains to work with the new(er) kernels?
> 
> ---
> Doubt is not a pleasant condition, but certainty is absurd.
>                 -- Voltaire
>                 
> Ted Gervais <ve1drg@ve1drg.com>
> 44.135.34.201 linux.ve1drg.ampr.org
> 
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
> 

 ---
 Fabian Arias Mu~oz                     |    		  Debian GNU/Linux Sid
 Facultad de Cs. Economicas y           |      	   Kernel 2.4.5ac15 - ReiserFS
 Administrativas.                       |                     "aka" dewback en
 Universidad de Concepcion   -  Chile   |                 #linuxhelp IRC.CHILE

Re: ipchains

[D. Stimits]

Ted Gervais wrote:
> 
> I just ran into something odd. To me anyways, it was odd.
> I just installed and brought up kernel 2.4.5 and my ipchains failed.
> So I upgraded to the latest (that I could find) ipchains-1.3.10, and
> that also fails.
> 
> Has anyone got any version of ipchains to work with the new(er) kernels?
> 
> ---
> Doubt is not a pleasant condition, but certainty is absurd.
>                 -- Voltaire
> 
> Ted Gervais <ve1drg@ve1drg.com>
> 44.135.34.201 linux.ve1drg.ampr.org
> 
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/

It works, but you can't load iptables modules at the same time as
ipchains. Be sure ipchains is the only module you are loading. rmmod any
iptables items before modprobe of ipchains. If you are running redhat,
also do not believe the script in /etc/rc.d/init.d/ipchains as to
whether or not ipchains is actually running, it is broken (does not
check return values), and lies and does not tell you when ipchains
startup fails (as root manually do something like ipchains -L -n).

D. Stimits, stimits@idcomm.com