On Fri, 14 Feb 2003, Shlomi Fish wrote: > On Fri, 14 Feb 2003, Omer Zak wrote: > > > Hello Doron, > > Thanks for the link.It is a first step in the right direction. But it > > is still good only for someone who is willing to invest some time and > > study the subject. > > It is not yet an "out of the box" solution for someone with simple and > > standardized needs and wants just to get the job done without being > > bothered. > > Time permitting, I'll study it and make a recommendation for Israeli ADSL > > users. > > You may wish to check out Shorewall: > > http://www.shorewall.net/ > > It is a standard firewall for iptables that is included with latest > versions of Mandrake. I did not use it yet.
I'm currently using it (on debian woody). iptables is, indeed, quite a low-level interface. There are simply too many pitfalls with a standard iptables script. For instance: what happens in case of a syntax error in the script? Shell scripts are prone to errors in the quite silly ways. -- Tzafrir Cohen mailto:[EMAIL PROTECTED] http://www.technion.ac.il/~tzafrir ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
