Win2k or Win32 IPTABLES

Hi,
Does anyone know where I can find a Win32 or at least Win2k version of
iptables?

my apologies for the crossposting.

Netfilter/iptables are the Linux kernel features and as such are only
available for Linux, not even for Unices, let alone Windows.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"goonmunster" <(E-Mail Removed)> wrote in message
news:RHwPd.35529$(E-Mail Removed) ...
> Hi,
> Does anyone know where I can find a Win32 or at least Win2k version of
> iptables?
>
> my apologies for the crossposting.

In comp.os.linux.networking goonmunster <(E-Mail Removed)>:
> Hi,
> Does anyone know where I can find a Win32 or at least Win2k version of
> iptables?

No such thing, iptables is the Linux kernel 2.4/2.6 built-in
state-full firewall (To be correct 'iptables' is just the name of
the user-space tool to manipulate firewall settings). Simply
install Linux if you want to enjoy all those great features.

Good luck

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo (E-Mail Removed) | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 17: fat electrons in the lines

goonmunster wrote:
> Hi,
> Does anyone know where I can find a Win32 or at least Win2k version of
> iptables?

I think you will have to wait until Bill Gates steals the code from
Netfilter and insert it in their *closed source* OS.

Regards.

--

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
(E-Mail Removed)
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
-- Jack Kerouac, "On the Road"

Thanks for your response. We been using iptables/netfilter on a
community webserver for the past 8 months. Myself, I've used
zonealarm and tpf in the past, but was hoping to find something that
uses few resources, does not require a gui, takes advantage of text
based script, and can send/write logs to event viewers logs. In any
case thanks for your help.

BTW, Assuming Netfilter/iptables is written in C, either a hook at one
level or another, or binary instrumentation could be used as a
mechanism to pass the necessary info into and out of a win32 IPTABLES
DLL. Is there some reason why the netfilter/iptables code can't be
ported to win32?

Enjoy your Valantines day.

On Sun, 13 Feb 2005 14:46:01 -0800, goonmunster wrote:

> BTW, Assuming Netfilter/iptables is written in C, either a hook at one
> level or another, or binary instrumentation could be used as a
> mechanism to pass the necessary info into and out of a win32 IPTABLES
> DLL. Is there some reason why the netfilter/iptables code can't be
> ported to win32?
>

Yes, It will become infested

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

goonmunster wrote:
[snip]
> BTW, Assuming Netfilter/iptables is written in C, either a hook at one
> level or another, or binary instrumentation could be used as a
> mechanism to pass the necessary info into and out of a win32 IPTABLES
> DLL. Is there some reason why the netfilter/iptables code can't be
> ported to win32?

Besides the differences at the network API level between MSWindows and the
unixish systems that use Netfilter, the only restriction would be one of licence.

Netfilter is GPL open source, and any use of Netfilter must conform to the GPL
licence. This means that, if Microsoft incorporated Netfilter into MSWindows,
they most likely would have to release the entirety of MSWindows as Open
Source GPL code. However, it might be possible for a third-party to build
/just/ Netfilter as a DLL, and release it /alone/ as an Open Source product
under the GPL without affecting the licence for MSWindows.


- --
Lew Pitcher

Master Codewright & JOAT-in-training | GPG public key available on request
Registered Linux User #112576 (http://counter.li.org/)
Slackware - Because I know what I'm doing.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCEBbBagVFX4UWr64RArrxAKCZMsqanEevq1HL4ecFq/VE1Q2rwgCgqDRq
EbhifEpTETcyf4FvuP9vlGY=
=zWdF
-----END PGP SIGNATURE-----

On 13 Feb 2005 14:46:01 -0800, "goonmunster"
<(E-Mail Removed)> wrote:


>BTW, Assuming Netfilter/iptables is written in C, either a hook at one
>level or another, or binary instrumentation could be used as a
>mechanism to pass the necessary info into and out of a win32 IPTABLES
>DLL. Is there some reason why the netfilter/iptables code can't be
>ported to win32?

My understanding is that netfilter is a integral part of the Linux
kernel, and therefore not very portable to a Windows environment.
It's not something that could be easily applicable to Windows TCP-IP.

You're looking for a Windows firewall. Linux has firewalling
capability (netfilter) already built into the kernel, it's simply a
matter of configuring it with iptables. I think that it's too deeply
embedded into the kernel to be portable to Windows. It's not really
an add-on program like Windows firewalls are.

Dan

Dan wrote:
> It's not really
> an add-on program like Windows firewalls are.

Which makes you wonder about windows firewalls....

Of course now I think it is more built in since SP2.

On Sun, 13 Feb 2005 21:41:00 -0800, Noah Roberts
<(E-Mail Removed)> wrote:

>Dan wrote:
>> It's not really
>> an add-on program like Windows firewalls are.
>
>Which makes you wonder about windows firewalls....
>
>Of course now I think it is more built in since SP2.

We had one of the PCs on our network infected with a trojan that was
spewing out spam email. We installed a firewall on it (can't remember
which one), blocked all ports going out, yet the spam still got
through.

It's a Win 2000 machine though, I'm not sure if XP would have fared
any better.

Dan