Greg Folkert on 27/04/07 02:10, wrote:
On Thu, 2007-04-26 at 20:55 -0400, Michael Pobega wrote:
Michael Pobega wrote:
On Thu, Apr 26, 2007 at 08:11:26AM +0200, Michael Dominok wrote:
Am Mittwoch, den 25.04.2007, 15:05 -0400 schrieb Celejar:
Well, on this list our (including me) favorite firewall is
Shorewall,
Well, is it? Mine's IPCop, though.
iptables here. It's a little bit tough to set up, but in the end it's
worth it in my opinion. Once you get used to the way iptables works
you can build a firewall for any system.
IPtables is *the* Linux firewall. Most of the other things people are
discussing here are higher-level tools designed to configure the
kernel-level IPtables stuff.
Okay, I guess I didn't make that clear.
I mean "plain old vanilla iptables". I prefer to learn the inner
workings of the program rather than use an interface to try to figure
things out.
And from what I've seen from some graphical firewalls, there are some
precise things that you just can't set up without the use of the
iptables command. But I guess that's the only REAL advantage using
iptables without an interface has.
fwbuilder makes plainly readable IPTABLE scripts. It works awesomely.
It also makes some nice functions and other things nicely.
I'll second that. fwbuilder is the business, and I'm only using it for one
machine. I think it's designed with major networks in mind. And I found the
documentation easily digestible too.
Adam
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]