about the iptables tutorial and the state of documentation

about the iptables tutorial and the state of documentation

[Nic]

After much searching around for info about the state of netfilter I
found your reference to the tutorial.

Thanks for mailing that to the list, without it I would never have
found out exactly what the situation is.

This is due to the awful state of the netfilter documentation. The
kernel documentation says that netfilter modules are no longer
included (it certainly doesn't seem possible to turn them on with
menuconfig) but the current netfilter documentation makes no mention
of that at all.

Maybe I've got the wrong end of the stick about all of this... but I'm
not an inexperienced linux admin and I was mighty confused. I dead to
think what someone coming from solaris of (horrors!) nt would think.


-- 
Nic Ferrier
http://www.tapsellferrier.co.uk

Re: about the iptables tutorial and the state of documentation

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1417 bytes --]

On Sun, Jul 13, 2003 at 01:29:57AM +0100, Nic wrote:
> After much searching around for info about the state of netfilter I
> found your reference to the tutorial.
> 
> Thanks for mailing that to the list, without it I would never have
> found out exactly what the situation is.
> 
> This is due to the awful state of the netfilter documentation. The
> kernel documentation says that netfilter modules are no longer
> included (it certainly doesn't seem possible to turn them on with
> menuconfig) but the current netfilter documentation makes no mention
> of that at all.

? Where did you read that the netfilter modules are no longer included?

What kernel version are you referring to?
Please include your .config in the next posting, so we can analyze where
your problem is.  It is most likely a usage problem.

And, in general, I don't think that the netfilter/iptables
[user] documentation is in an awful state.  The developer documentation
is out of date, however

> Nic Ferrier
> http://www.tapsellferrier.co.uk

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]