search for: iptables6

How is the effort to make Shorewall do iptables6 going? -- Patrick "Diablo-D3" McFarland || pmcfarland@downeast.net "Computer games don''t affect kids; I mean if Pac-Man affected us as kids, we''d all be running around in darkened rooms, munching magic pills and listening to repetitive electronic music." --...

I don't really understand the intent behind firewalld. The RHEL7 Security Guide states "A graphical configuration tool, *firewall-config*, is used to configure firewalld, which in turn uses *iptables tool* to communicate with *Netfilter* in the kernel which implements packet filtering". So is the goal for firewalld to implement a GUI for iptables? What is the "value added"

...> configure firewalld, which in turn uses *iptables tool* to communicate with >> *Netfilter* in the kernel which implements packet filtering". >Well, the order from Kernel inside outward is: > >1. Netfilter (inside Kernel), not directly accessible by userland >2. iptables/iptables6, the userland cli tools to manipulate the Netfilter > .... >3. firewalld(RedHat/CentOS), or SuSEfirewall(Suse), or similar are the > .... >4. GUI tools, that allow to manipulate the config of firewalld (or similar), .... >Does that answer your question about *value added* by GU...

...filtering". > > So is the goal for firewalld to implement a GUI for iptables? What is the > "value added" by firewalld? > Thanks....Nick Geo Well, the order from Kernel inside outward is: 1. Netfilter (inside Kernel), not directly accessible by userland 2. iptables/iptables6, the userland cli tools to manipulate the Netfilter entries, mighty and complex, error-prone for casual use. 3. firewalld(RedHat/CentOS), or SuSEfirewall(Suse), or similar are the tools that simplify the task of creating the needed iptable rules, as not every one wants to write them by...