Difference between revisions of "Iptables"

From Linux-VServer

Jump to: navigation, search
(intro)
Line 1: Line 1:
 +
Problem: The network packet filter, as implemented into Linux kernel, does not provide a concept of "personalties" which allow subsetting a rule set per vserver guest. But by providing guest specific chains, used to direct network packets with source or destination of a given guest, and introducing a mechanism to allow guest to update exclusively this guest specific chain, the outcome is rather similar.
 +
 +
These pages inventarise the efforts of realisation. 
 +
 
[[Iptables Consolidate requirements]]<br>
 
[[Iptables Consolidate requirements]]<br>
 
[[Iptables Collect previous work]]<br>
 
[[Iptables Collect previous work]]<br>
 
[[Iptables Demonstrate workability]]<br>
 
[[Iptables Demonstrate workability]]<br>
 
[[Iptables Implementation]]<br>
 
[[Iptables Implementation]]<br>
 +
 +
online contact:  irc.oftc.net, #vserver-iptables

Revision as of 05:46, 11 February 2010

Problem: The network packet filter, as implemented into Linux kernel, does not provide a concept of "personalties" which allow subsetting a rule set per vserver guest. But by providing guest specific chains, used to direct network packets with source or destination of a given guest, and introducing a mechanism to allow guest to update exclusively this guest specific chain, the outcome is rather similar.

These pages inventarise the efforts of realisation.

Iptables Consolidate requirements
Iptables Collect previous work
Iptables Demonstrate workability
Iptables Implementation

online contact: irc.oftc.net, #vserver-iptables

Personal tools