[Gllug] ipchains, nat and hosts.allow

[Tethys]

chris.wareham at btopenworld.com writes:

>Setting up a straightforward firewall machine is very, very easy
>with OpenBSD or NetBSD. I've always found doing the same with Linux
>to be a very frustrating experience - module problems, arse about
>face rule precedence, etc.

Agreed. Both ipf and pf are *significantly* easier to get up and running
than ipchains/iptables, and I highly recommend using BSD for a firewall.
The only thing to watch out for is the slightly non-intuitive ipnat rule
syntax, but once you're past that, it all plain sailing.

Tet

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug