Why does Fedora do this with iptables?

Michael Klinosky mpk2 at enter.net
Wed Sep 12 00:50:43 UTC 2007


Michael S.:
> With iptables/netfilter, user-defined chains are *essential* for many
> firewall implementation details. There are some things you cannot do
> without using user-defined chains (e.g. a logical AND for certain
> types of traffic). Get used to it.

OK. But, why put everything into a U-D chain? I figure that the geek 
thing would be to have them for only that which needs it.

Robert:
> Note that the RH-Firewall-1-INPUT chain is called from two places.
> Think about it.

Not on mine:   Chain RH-Firewall-1-INPUT (1 references)




More information about the users mailing list