Difference between revisions of "Iptables"
From Linux-VServer
(intro) |
|||
| Line 1: | Line 1: | ||
| + | Problem: The network packet filter, as implemented into Linux kernel, does not provide a concept of "personalties" which allow subsetting a rule set per vserver guest. But by providing guest specific chains, used to direct network packets with source or destination of a given guest, and introducing a mechanism to allow guest to update exclusively this guest specific chain, the outcome is rather similar. | ||
| + | |||
| + | These pages inventarise the efforts of realisation. | ||
| + | |||
[[Iptables Consolidate requirements]]<br> | [[Iptables Consolidate requirements]]<br> | ||
[[Iptables Collect previous work]]<br> | [[Iptables Collect previous work]]<br> | ||
[[Iptables Demonstrate workability]]<br> | [[Iptables Demonstrate workability]]<br> | ||
[[Iptables Implementation]]<br> | [[Iptables Implementation]]<br> | ||
| + | |||
| + | online contact: irc.oftc.net, #vserver-iptables | ||
Revision as of 05:46, 11 February 2010
Problem: The network packet filter, as implemented into Linux kernel, does not provide a concept of "personalties" which allow subsetting a rule set per vserver guest. But by providing guest specific chains, used to direct network packets with source or destination of a given guest, and introducing a mechanism to allow guest to update exclusively this guest specific chain, the outcome is rather similar.
These pages inventarise the efforts of realisation.
Iptables Consolidate requirements
Iptables Collect previous work
Iptables Demonstrate workability
Iptables Implementation
online contact: irc.oftc.net, #vserver-iptables
