IP tables - Dedicated Server Hosting | VPS Hosting

Bodhost-Andy · #1 (**permalink**) 01-01-09, 12:28

Iptables is used to Define rules and Command for a net fillteration that facilitates Network Address Translation (NAT), packet filtering, and packet mangling in the Linux 2.4 and later operating systems. NAT is the process of converting an Internet Protocol address (IP address) into another IP address. Packet filtering is the process of passing or blocking packets at a network interface based on source and destination addresses, ports, or protocols. Packet mangling is the ability to alter or modify packets before and/or after routing.

Iptables and netfilter are the successor to ipchains and ipfwadm in earlier versions of Linux. Netfilter and iptables are often combined into the single expression netfilter/iptables, which refers to the Linux 2.4 and later subsystems for NAT, firewalling, and advanced packet processing.

Danny Lawson · #2 (**permalink**) 01-17-09, 22:14

Are there any drawbacks assosiated with netfilter/iptables and if there are, have there been any updateds or patches for the same?

sam · #3 (**permalink**) 01-18-09, 08:22

Yes there is a major drawback with large rule sets gives you poor performance.

Christina · #4 (**permalink**) 01-19-09, 05:22

Yes IP tables slightly affect the performance but it harden your security. The connection-tracking feature of IP Table is a major advantage of IP tables.

Danny Lawson · #5 (**permalink**) 01-19-09, 21:44

Yes Christina, good things always come with some drawbacks but I guess we can ignore those and focus on the advantages as I do see that there are a lot of updates and pacthes available for IP tables.

Shane Phillips · #6 (**permalink**) 01-20-09, 10:20

IMO, Security of server is more important when compared to performance on a server. But my words can be contradictory depending upon the requirements.

aliya · #7 (**permalink**) 01-21-09, 06:16

Is CSF also configure the same IP tables?

carl owen · #8 (**permalink**) 01-23-09, 13:38

Quote:

Originally Posted by aliya

Is CSF also configure the same IP tables?

CSF Firewall and IP tables are the two different Firewalls that are used to secure a server. These are different software firewalls which can be configured on the server for additional security of the server.

Shane Phillips · #9 (**permalink**) 01-24-09, 07:40

There are many benefits of IPtables. I have listed a few :

- Memory assigned to each connection which is required for FTP / DNS and other network services.
- Flter based on TCP flags and MAC addresses.
- Flexible than IPchains
- Netfilter allows NAT and transparent proxies.
- It allows block to DoS at some rate.