RE: IPTables articles links

["George Vieira" <georgev@citadelcomputer.com.au>]

Great going David, I know what you mean by spelling.. my last name is spelt
in many ways even I couldn't pronounced the way they've spelt it in the
past..

One note about you March article which has an error in it..

<snip>
iptables -I INPUT 3 -s 10.0.0.0/8 -j ACCEPT
This would insert the rule into the third 'slot' of the chain. Of
course, if there is currently only one rule in the chain, it would
just be tacked on the end.
to the floor, as if our system was not even there. This type of
packet blocking is known as 'stealth' firewalling, as it the
firewall does not respond to the client when it blocks a
www.iptables.org/ contains all
the information on installing
the user space utilities
required to properly configure
</snip>

This is incorrect, at least in 1.2.7a from what I've tested.. if the max
ndex is lower than the insert, it'll error as below.


iptables -I MRTG 1000 -s 192.168.1.111
iptables: Index of insertion too big

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of David Coulson
Sent: Friday, August 01, 2003 11:00 AM
To: webmaster@netfilter.org; netfilter@lists.netfilter.org
Subject: IPTables articles links


http://www.iptables.org/documentation/index.html

# Part 1 of an introductory iptables tutorial by David Culson
# Part 2 of an introductory iptables tutorial by David Culson

Please do the following:

1) Spell my name correctly - It's right above the two which were spelled
wrong.
2) Link directly to my PDFs, so that the copyright information is easily
accessable for those who need to know about it.

I e-mailed webmaster@netfilter.org eariler this week, but had no response.

David

--
David Coulson                                    email: d@vidcoulson.com
Linux Developer /                          web: http://davidcoulson.net/
Network Engineer                                   phone: (216) 533-6967