iptables vs. Linux kernel version question

iptables vs. Linux kernel version question

[Noino]

Is the a correspondence to be obeyed between the versions of the Linux 
kernel version & the iptables program ? 

Specifically, I run a Linux kernel 2.6.5. My actual version of iptables is 
1.2.9. Can I replace the latter with an up-to-date version without conflict 
(or else, up to which version?) - and in the positive, is there anything to 
be gained from a new iptables program working with the older kernel ? 

Regards 

-- 
Noino

Re: iptables vs. Linux kernel version question

[Pascal Hambourg]

Hello,

Noino a écrit :
> Is the a correspondence to be obeyed between the versions of the Linux 
> kernel version & the iptables program ?
> Specifically, I run a Linux kernel 2.6.5. My actual version of iptables 
> is 1.2.9. Can I replace the latter with an up-to-date version without 
> conflict (or else, up to which version?)

I have successully used an old iptables 1.2.11 with a recent Linux 
kernel 2.6.24, but not the other way around.

> - and in the positive, is there 
> anything to be gained from a new iptables program working with the older 
> kernel ?

- Bug fixes.
- If the old iptables is older than the kernel, support for some new 
matches, targets and options. For exemple the "comment" match support 
requires Linux kernel >= 2.6.9 and iptables >= 1.3.0. (OK, this match 
may not be interesting enough to justify an upgrade)