On Sun, Aug 19, 2001 at 11:29:35PM -0700, Erik Lotspeich wrote: > What I have found indicates that ipchains in Linux 2.2 is not capable of > 1:1 NAT, but Linux 2.4 is. Is this true? I'd prefer to stick with Linx > 2.2 because I need H323 over IP Masquerading and I haven't found such an > add-on module for Linux 2.4. Linux 2.2+ supports simple stateless 1:1 NAT with no protocol translation (with an ip rule ... nat rule; see the iproute2 documentation). This is simple and efficient, but most people need protocol translation e.g. to let FTP still work. It also supports 1:n NAT in form of masquerading with protocol translation. HOWTOs exist. Linux 2.4+ supports all the same; plus in addition a new NAT module from netfilter which supports protocol translation and more or less full M:N NAT. HOWTOs exist. > > Is there some clear documentation that associates all of the Linux network > utilities with kernel version? So far I've come across ipfwadm, > ipmasqadm, iptables, ipchains, and ip. From what I gather, iptables works > with Linux 2.4 and ipchains works with Linux 2.2. I know that ipfwadm > works with the Linux 2.0 kernel, but what about the others? I've > successfully used ipfwadm with Linux 2.2... 2.0: ipfwadm only 2.2: ipchains only 2.4: ipfwadm, ipchains, iptables -Andi - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
