Firewall Wizards: Re: IPChains vs. IPTables

["Josh Welch" <jwelch () buffalowildwings com>]

From: "Patrick Darden" <darden () armc org>
> IPTables allow content inspection (making sure port 80 traffic is web, 21
> is ftp, etc.), making it a little better than a mere packet filter.
> Truthfully, though, with tunnelling, if you don't have tight access lists
> then allowing any protocol access is just as secure via packet filtering
> as packet inspection.  Loki uses icmp; then there's ssl tunneling, ssh,
> and hosts of others....
>
> --
> --Patrick Darden                Internetworking Manager
> --                              706.475.3312    darden () armc org
> --                              Athens Regional Medical Center
IPTables does not , to my understanding, do content inspection. It does
state inspection, which IPChains does not, but does not check content. How
would you check content with IPTables?.

Josh

<snipped original question about differences in IPChains vs IPTables>

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards