Re: [SLE] ipchains replaced by iptables ??

On Friday 01 June 2001 11:45 am, Linux - User wrote:

hi guys...

I hear the rumor that the ipchains command is going to be replaced by the iptables ? is this true ? is iptables better that ipchains ?

bye

--ed

iptables is much MUCH better than ipchains. ipchains is what is called a "stateless" firewall -- it doesn't have any "memory" of previous connections... where as iptables is a "statefull" firewall -- you can set it to predict things like DDoS attacks and whatnot. Very nice. The newer 2.4 Linux kernel will be using iptables, and have ipchains compatibility, so that people who don't want to move to iptables don't have to. I personally find iptables to be more logical in configuration than ipchains is. Have fun :) -Steven