[ale] cisco 2600 -> iptables?

[forsaken at targaryen.us (Forsaken)]

On Aug 12, 2008, at 9:32 AM, Robert L. Harris wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> ~  I have a Cisco 2600 that is acting as the main firewall/router for
> our company which is causing
> me to lose sleep due to the nature of lack of failover, etc.  I have
> 2x1U boxes I can set up as Linux
> servers with heartbeat.  I want to convert the existing 2600 Config to
> iptables.  Has anyone seen
> a tool to do such a conversion automatically, preferably to skip the
> manual errors, typos, etc?
> Google has a couple hits, some do not go anywhere, but has anyone had
> experience with them?

You know, come to think of it, I haven't. I wouldn't think it'd be  
that difficult to script. Are you using just standard ACL's, extended  
ACL's, or are nat translations thrown in there as well?