Iptables / ipchains

Just a quickie question ...

i read somewhere that iptables is a kinda enhanced version of ipchains.

So if I want to do firewalling, NAT and such, is it enough just to install iptables ?

You need to have network packet filtering in kernel too.

Could you be a little bit more extensive please Mic ? thanx a lot

I meant you need to enable that in the kernel, ie. compile, if it's not in it already.

Networking support - Networking options - Network packet filtering (replaces ipchains) - IP netfilter configuration, select what you need. If you're not sure, I don't think it'd hurt to select all of them. Descriptions should explain them a bit.

Ye, i think 'ill recompile then, i have to do it anyway to include ext3 (other thread).

Yes, iptables is a upgraded ipchains.