On Sunday 23 December 2007 10:27:22 pm Miles Brennan wrote:
The shorewall package is an application designed to assist users in
configuring iptables, in fact the structure of the files from what I
have seen, mimic the iptables scripts to some extent.
Exactly.
I found it quite difficult to set up iptables directly
(this was before I read your HOWTO!)
and more importantly I had no confidence
that my iptables gave me reasonable security.
I'm not sure, as I said earlier,
to what extent shorewall has become the standard way
of setting up iptables.
But I certainly think, if you are lazy like me,
that it saves a lot of brain cells.