Re: [gentoo-user] IPCHAINS or other alternative firewalls or packet-filters?

[Walter Dnes]

On Tue, Aug 18, 2009 at 06:17:47PM -0500, Dan Farrell wrote

> I too am a minimalist but I think you've got iptables misidentified.
> It has lots of features; that's not the same as saying it's bloated.
> More like the linux kernel (and in fact it _is_, as others have said,
> the linux kernel) - it supports a lot of different functionality.  If
> you don't want a particular capability, disable it in the kernel.

  Alan and Dan

  I can set rules OK.  My problem is figuring out which capabilities to
build or not build in order to create a firewall.  I.e. I need a
menuconfig guide not an iptables rules front end.

> If you want a quick firewall setup, use
> http://spore.ath.cx/~dan/doc/home-firewall.html.  It's what I use and
> my step by step guide should save you a bit of effort.

  OK I'll follow your section listing for most of the necessary
menuconfig items, but I'll drop the NAT support.  Is there any reason
you build modules rather than directly into the kernel?


  Last minute addendum; saying "No" to
  [ ]   Advanced netfilter configuration
greatly reduces the number of options showing up.  I think this is what
I was looking for.

-- 
Walter Dnes <waltdnes@××××××××.org>