Help with ipfw to iptables conversion?

[dsr-mzpnVDyJpH4k7aNtvndDlA at public.gmane.org (Dan Ritter)]

On Thu, Mar 19, 2009 at 03:38:19PM -0400, Scott R. Ehrlich wrote:
> I have a firewall ruleset from an OS X system I want to convert to 
> iptables for use on a Linux box.    Is there any sane way to convert the 
> ruleset next to going line by line and learning ipfw's rules, and working 
> on trying to figure out the corresponding iptables way of doing it?

No, and line-by-line isn't necessarily right, either. It might
work for a few simple sets, but as soon as you get into anything
complex, 1:1 won't work.

The right way is to write down the intent of the ipfw rules,
understanding them, and then writing iptables rules that have
the same intent.

-dsr-

-- 
http://tao.merseine.nu/~dsr/eula.html is hereby incorporated by reference.

You can't defend freedom by getting rid of it.