This is a multi-part message in MIME format. ------=_NextPart_000_0099_01C24876.7518DE20 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dear all, I am newbie. However, I tried iptables recently and succeeded. I don't = understand the relationship between iptables and iproute2, is iproute = used to replace iptables? Thanks, James ------=_NextPart_000_0099_01C24876.7518DE20 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 5.50.4308.2900" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2>Dear all,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>I am newbie. However, I tried iptables = recently and=20 succeeded. I don't understand the relationship between iptables and = iproute2, is=20 iproute used to replace iptables?</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>Thanks,</FONT></DIV> <DIV><FONT face=3DArial size=3D2></FONT> </DIV> <DIV><FONT face=3DArial size=3D2>James</FONT></DIV></BODY></HTML> ------=_NextPart_000_0099_01C24876.7518DE20--
Am Mittwoch, 21. August 2002 00:21 schrieb James Ma: > Dear all, > > I am newbie. However, I tried iptables recently and succeeded. I don't > understand the relationship between iptables and iproute2, is iproute u= sed > to replace iptables? No. The iproute2 utilities allow to set various things, such as ip addres= ses,=20 routing entries or the traffic shaper. The iptables tool is responsible for the firewall and the rules in there = - as=20 well as some packet mangling and network address translation. You can com= bine=20 both tools with the -j MARK directive .. rtfm ;-) - Thilo Schulz
On Wednesday 21 August 2002 00:21, James Ma wrote: > Dear all, > > I am newbie. However, I tried iptables recently and succeeded. I don't > understand the relationship between iptables and iproute2, is iproute u= sed > to replace iptables? iptables is to create firewall chains iproute2 contains 2 programs : ip : For setting/changing all the ip configuration and routing tc : For manipulating the bandwidth managing part of the kernel But iptables and iproute can work together. You can mark packets with=20 iptables and use that mark to route packets or use that mark in the filte= rs=20 you can add with tc. More info about the iproute2 utility can be found on www.lartc.org. Stef --=20 stef.coene@docum.org "Using Linux as bandwidth manager" http://www.docum.org/ #lartc @ irc.oftc.net