Re: iptables vs. Linux kernel version question

[Pascal Hambourg <pascal.mail@plouf.fr.eu.org>]

Hello,

Noino a écrit :
> Is the a correspondence to be obeyed between the versions of the Linux 
> kernel version & the iptables program ?
> Specifically, I run a Linux kernel 2.6.5. My actual version of iptables 
> is 1.2.9. Can I replace the latter with an up-to-date version without 
> conflict (or else, up to which version?)

I have successully used an old iptables 1.2.11 with a recent Linux 
kernel 2.6.24, but not the other way around.

> - and in the positive, is there 
> anything to be gained from a new iptables program working with the older 
> kernel ?

- Bug fixes.
- If the old iptables is older than the kernel, support for some new 
matches, targets and options. For exemple the "comment" match support 
requires Linux kernel >= 2.6.9 and iptables >= 1.3.0. (OK, this match 
may not be interesting enough to justify an upgrade)