On Mon Apr 16 2001 at 09:13, Sven Koch wrote: > On Mon, 16 Apr 2001, XingFei wrote: > > > I know Iptables is a upgraded packet filtering utility with linux2.4 > > but I don't know whether it can fulfill the functions of so-called > > Stateful Inspecton firewall. > > It can. > See http://netfilter.samba.org/ for more information. I have never heard of a "stateful inspection firewall", and I've been building firewalls with ipfwadm and ipchains for several years (mostly self-taught with howtos etc and experience). Netfilter is an option I want to start using soon, another learning spree... I found lots of great references at that URL, but nothing obvious that talks about stateful inspection firewalls. Or is this just a fancy academic name for otherwise obvious concepts? > The Internet treats censorship as a routing problem, and routes around it. > (John Gilmore on http://www.cygnus.com/~gnu/) Good one, I can relate to that :-) Cheers Tony LinuxWorks for networking : tony@linuxworks.com.au Consultant, GrowZone OnLine : tony@growzone.com.au - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org