difference between NetFilter and IPFilter

This is a discussion on difference between NetFilter and IPFilter within the IPFilter forums, part of the System Security and Security Related category; hi all, >From what ever docs i have quickly gone through , i feel IPFilter is similar kind of thing ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-06-2006
will_u_tellmemore
 
Posts: n/a
Default difference between NetFilter and IPFilter

hi all,
>From what ever docs i have quickly gone through , i feel IPFilter is

similar kind of thing as compared to Nefilter framework on Linux.
Please correct me if i am wrong .
So i just wan to validate this assumption and know differences between
them.

Q 1: Is IPFilter also framework like it which allows me to write new
kernel module which allows me to insert my hooks for inbound and
outbound TCP packets.
Or
is it a application that allows me to define some firewall rules and
doesn't allow insertion of any of such hooks
through a kernel module.

Q:2 How is it available on Linux ?? as part of standard Linux Kernel
or kernel module which can be inserted into a standard linux kernel ??

if module on linux , does IPFilter uses Netfilter framework
underneath to implement
those PRE_ROUTING and POST_ROUTING hooks ??

Q:3 Can i get a list of linux distribution with which it has been
tested to work successfully.

Q: 4 If i want to write a kernel module to intercept TCP packets , and
i have options of using IPFilter and Netfilter , which should i choose
?? .Once linux task is complete i would like to go ahead with Solaris
and AIX.


Thanks ,
Rohit

Reply With Quote
  #2 (permalink)  
Old 12-08-2006
will_u_tellmemore
 
Posts: n/a
Default Re: difference between NetFilter and IPFilter


I guess IpFilter is not framework kinda thing like NetFilter but it is
something which sits on top of NetFilter or other such things(e.g. pfil
on Solaris and *BSD* ).
But from this i think i should use same strategy as that of IPFilter
and use same hooks which it uses for portability.


Thanks
Rohit

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 02:07 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0