I have never used ipchains, so I don't know about differences between the 2. If I understand correctly, port forwarding refers to letting the outside world access a particular port on an internal machine behind the firewall. As far as I can tell, endoshield makes this transparent. For example, I told the script that it could trust all data coming from my lan. I think the variable is TRUSTLAN, and you set that to "yes". Then, once I opened a port on the firewall to the outside world, my internal lan machines were able to send data to and from that port without me having to do anything else. I hope that answers your question. Greg On Sat, Sep 21, 2002 at 03:57:57PM -0400, Scott Howell wrote: > Folks, > > I'm working on this endoshield script which looks pretty good. One > question I had was forwarding ports for speakfreely. I know in the past > once the firewall was setup with ipchains, you couldn't access another > box on the network to use speakfreely without running the firwall script > again. I'll admit I'm not real up on iptables yet, but its what I'd > prefer to use. First is the forwarding of ports basically the same with > iptables as it is with ipchains? It would appear, but I know ipchains > required some different modules for stuff like napster, but have no > reason to bother with that any longer. What I am curious about in > particular ia the possibility of moving from one box to another and use > speakfreely not at the same time, but kill one session and go to another > box and start a new one without running the firewall again. > Is this possible with iptables? > > tnx > > > _______________________________________________ > Speakup mailing list > Speakup at braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup