Re: migrating ipchains to iptables

[Arnt Karlsen <arnt@c2i.net>]

On Mon, 31 Mar 2003 21:27:54 -0500, 
"John Lumby" <johnlumby@hotmail.com> wrote in message 
<F78G1vzGbjkJ3FvTFnQ00016fee@hotmail.com>:

> I'm running a 2.4.18-3 kernel but for strange reasons have always used

..you want 2.4.18-27.7|8.x|0.etc.  _Now_. 
http://rhn.redhat.com/errata/rh72-errata.html or
http://rhn.redhat.com/errata/rh73-errata.html or
http://rhn.redhat.com/errata/rh8-errata.html

> ipchains.   Now want to switch to iptables.   Wondering if anyone has
> ever written a script which will read an ipchains file as created by
> 
>        /etc/rc.d/init.d/ipchains save

..the easy way is use the 'setup' utility, then choose firewall setup.

> and either convert it to /etc/rc.d/init.d/iptables save format or set
> up the "corresponding" iptables chains directly.

..first however, "ipchains-save"(?), then ' service ipchains stop 
&& rpm -e ipchains','rpm -ivh iptables-$the-newest.rpm', and 'setup' 
as above.  Tweaks: put in the equivalent of your ipchains settings, 
plus bonus stateful firewalling.

..another _good_ option: combine Shorewall(.net) and Webmin(.com),
to control iptables.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.