Recently, KP sent me a private email that commented unfavorably on the
increasing size of Shorewall. In my response, I indicated that there was some
low-hanging fruit that could be picked to reduce Shorewall's overall size.

I made some of the changes in the just-released 3.2.3 version. I've now
completed the work and the current version in SVN (branches/3.2/Shorewall) shows
the result.

Here is Shorewall version 3.2.2:

[EMAIL PROTECTED]:~/shorewall/tags/3.2.2/Shorewall$ ls -lS | head
total 1001
-rwxr-xr-x 1 teastep teastep 217476 2006-08-10 07:12 compiler
-rwxr-xr-x 1 teastep teastep  61995 2006-08-10 07:12 firewall
-rw-r--r-- 1 teastep teastep  50659 2006-08-10 07:12 functions
-rwxr-xr-x 1 teastep teastep  43981 2006-08-10 07:12 shorewall
-rw-r--r-- 1 teastep teastep  31694 2006-08-10 07:12 shorewall.conf
-rw-r--r-- 1 teastep teastep  16895 2006-08-10 07:12 rules
[EMAIL PROTECTED]:~/shorewall/tags/3.2.2/Shorewall$

Here is the current SVN Version:

[EMAIL PROTECTED]:~/shorewall/branches/3.2/Shorewall$ ls -lS | head
total 981
-rwxr-xr-x 1 teastep teastep 201670 2006-08-27 09:42 compiler
-rw-r--r-- 1 teastep teastep  69520 2006-08-27 09:28 functions
-rwxr-xr-x 1 teastep teastep  46039 2006-08-25 09:29 shorewall
-rw-r--r-- 1 teastep teastep  32070 2006-08-17 09:08 shorewall.conf
-rwxr-xr-x 1 teastep teastep  23952 2006-08-27 09:20 firewall
-rw-r--r-- 1 teastep teastep  16895 2006-05-18 11:05 rules
[EMAIL PROTECTED]:~/shorewall/branches/3.2/Shorewall$

While 'functions' has grown, both 'compiler' and 'firewall' have been reduced
significantly in size.

For reference, here is Shorewall 3.0.8:

[EMAIL PROTECTED]:~/shorewall/tags/3.0.8/Shorewall$ ls -lS | head
total 845
-rwxr-xr-x 1 teastep teastep 237367 2006-06-21 16:51 firewall
-rwxr-xr-x 1 teastep teastep  32877 2006-06-21 16:51 shorewall
-rw-r--r-- 1 teastep teastep  29605 2006-06-21 16:51 shorewall.conf
-rwxr-xr-x 1 teastep teastep  20449 2006-06-21 16:51 functions
-rw-r--r-- 1 teastep teastep  16790 2006-06-21 16:51 rules
-rwxr-xr-x 1 teastep teastep  16368 2006-06-21 16:51 install.sh
-rw-r--r-- 1 teastep teastep  13174 2006-06-21 16:51 macro.template
[EMAIL PROTECTED]:~/shorewall/tags/3.0.8/Shorewall$

I have experimented with modularizing Shorewall so that features like traffic
shaping, accounting, etc. can be made optional and I will continue to pursue
that approach for Shorewall 3.4.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to