On 2010-04-10 10:26 PM, Kerin Millar wrote: > On 10/04/2010 23:17, Tanstaafl wrote: >> This is on a server box, and I am *not* doing NAT on it... >> >> Do I even need the nat table? If not, I'd like to build the kernel >> without NAT support, but if there's a good reason not to do that, I >> won't...
> If you will not be populating the nat table, you are free to build the > kernel without CONFIG_NF_NAT and its associated options. Thanks Kerin... Same question then for the raw table... I'm a bit clueless when it comes to firewalls, and have no idea what these numbers mean/do: *raw :PREROUTING ACCEPT [4911:886011] :OUTPUT ACCEPT [4546:2818732] COMMIT -- Charles