Hi, On Tue, Apr 24, 2012 at 3:25 AM, Stefan Baur <[email protected] > wrote:
> Am 24.04.2012 09:20, schrieb Seth Mos: > > There's a lot of other fixes unrelated to IPv6 in 2.1 that you'll find >> which you will probably like. >> > > Well, I'm sure you've heard of "never change a running system"... and my > 2.0.1 installations are running just fine right now, and that's the way I > like them. ;-) > I'm usually a pretty ardent follower of this rule myself -- except when it comes to outside facing systems. With anything that is pointing in the direction of the "outside", whether that be the Internet or other hordes you don't want having extra access to your internal networks, you really have to work a bit harder to keep it up to date. My suggestion is that you have a couple of boxes to do this -- you don't need anything too fancy or expensive for the second box -- and then you can simply upgrade the second one, swap them to see if there are issues and quickly swap back if there are any, and when you get your "warm fuzzy" feeling, upgrade the original. Lots of commercial firewall makers make updates to their "firmware" or loads which they expect you to load on as soon as you can. With those, you get a combo of security, bug fixes and "features" which may or may not be helpful, and has never given my either a warm or fuzzy feeling.
_______________________________________________ List mailing list [email protected] http://lists.pfsense.org/mailman/listinfo/list
