Re: ipchains vs iptables

On Thu Mar 27 2003 at 09:23, =?iso-8859-1?Q?Kiss_G=E1bor?= wrote:

> can somebody help me, why at boot the ipchains modul starts and not the
> iptables?

This would give some clues:

	chkconfig --list | grep -E "iptables|ipchains"

> The kerner settings are correct. If after boot I remove from modules the
> ipchains and I make
> service iptables start, the iptables_filter and ip_tables modules are
> starting fine.
> Under program setup/services.. I stoped the ipchains and I started the
> iptables service, but at boot the ipchains started.

That's bad, and why I don't rely on the system configuration tools
(especially on older distributions).  These sorts of things are
almost trivial to manage by hand.

For example, to see all the services started at runlevel 3:
	chkconfig --list | grep 3:on
... all the services off at runlevel 5:
	chkconfig --list | grep 5:off
... and the state of the xinetd services:
	chkconfig --list | grep -v 5:o

> I watched all /etc/rc* dir and the ipchains service has K* links, and all
> the iptables services have S* links.

Yes, understand how it all works, but take care that you know
exactly what you are doing if you want to manipulate them.  I have
found that chkconfig will manage these properly for you if you give
it the right magic spells.

> It is intresting when I make a firelwall rule with setup/firewall.. this
> makes not /etc/sysconfig/iptables but /etc/sysconfig/ipchains file.

Sure: "service iptables save" will produce /etc/sysconfig/iptables,
and "service ipchains save" will produce /etc/sysconfig/ipchains.
Very useful.

> Are there any settings to switch between iptables and ipchains about this?

Do this and then rest easy:

	service ipchains off
	service iptables on

Now iptables will start each reboot, with ipchains disabled so it
won't get in the way.

> Thanx
> Gábor

Cheers
Tony