📄 00000012.htm
字号:
<HTML><HEAD> <TITLE>BBS水木清华站∶精华区</TITLE></HEAD><BODY><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER>发信人: zixia (Do you zixia tonight), 信区: Linux <BR>标 题: 10. Differences Between iptables and ipchains he <BR>发信站: BBS 水木清华站 (Wed Oct 11 01:18:40 2000) WWW-POST <BR> <BR> Next Previous Contents
<BR>
<BR> ----------------------------------------------------------------------
<BR>
<BR>10. Differences Between iptables and ipchains <BR>he
<BR>
<BR> * Firstly, the names of the built-in chains have changed from lower <BR>case
<BR> to UPPER case, because the INPUT and OUTPUT chains now only get
<BR> locally-destined and locally-generated packets. They used to see all
<BR> incoming and all outgoing packets respectively.
<BR> * The `-i' flag now means the incoming interface, and only works in the
<BR> INPUT and FORWARD chains. Rules in the FORWARD or OUTPUT chains that
<BR> used `-i' should be changed to `-o'.
<BR> * TCP and UDP ports now need to be spelled out with the --source-port <BR>or
<BR> --sport (or --destination-port/--dport) options, and must be placed
<BR> after the `-p tcp' or `-p udp' options, as this loads the TCP or UDP
<BR> extensions respectively.
<BR> * The TCP -y flag is now --syn, and must be after `-p tcp'.
<BR> * The DENY target is now DROP, finally.
<BR> * Zeroing single chains while listing them works.
<BR> * Zeroing built-in chains also clears policy counters.
<BR> * Listing chains gives you the counters as an atomic snapshot.
<BR> * REJECT and LOG are now extended targets, meaning they are separate
<BR> kernel modules. s
<BR> * Chain names can be up to 31 characters.
<BR> * MASQ is now MASQUERADE and uses a different syntax. REDIRECT, while <BR>n
<BR> keeping the same name, has also undergone a syntax change. See the
<BR> NAT-HOWTO for more information on how to configure both of these.
<BR> * The -o option is no longer used to direct packets to the userspace
<BR> device (see -i above). Packets are now sent to userspace via the <BR>QUEUE
<BR> target.
<BR> * Probably heaps of other things I forgot.
<BR>
<BR> ----------------------------------------------------------------------
<BR>
<BR> Next Previous Contents <BR>-- <BR>))))))))))))))))))))))))))))))))))))))))))))))))))) <BR> ((((((((((((生命的欢喜可以再影印一张吗?(((((((((((( <BR> ))))))))))))老去的热情可以再拉皮整形吗?)))))))))))) <BR> ((((((((((((病中的真理可以再传真校对吗?(((((((((((( <BR> ))))))))))))死掉的爱情可以再输入键出吗?)))))))))))) <BR> ((((((((((((((((((((((((((((((((((((((((((((((((((( <BR> <BR>※ 来源:·BBS 水木清华站 smth.org·[FROM: 202.112.45.49] <BR><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER></BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -