Am Samstag, 18. September 2004 18:24 schrieb Tom Eastep: > Paul G Rogers wrote: > |>From the user's point of view, most don't understand all the > |> details of > | > | firewalling, able to judge the benefits of Shorewall vs other > | approaches. But what they do experience is the installation and > | customization process. I've always felt Bering should have > | easier ways to customize all its parameters. Granted grand > | schemes would be difficult to do and keep everything small, but a > | parameterized variables file wouldn't be so large. > > I experimented with a parameterized Shorewall configuration for a > while. What I found was that it made it easier for people to > install Shorewall initially, but the first time that they wanted to > do something for which there wasn't a parameter, they had to deal > with a complete paradigm shift. I concluded that it was better to > force users to deal with "real" Shorewall configuration from the > outset. > > I agree that the biggest problem with LEAF is that is is way too > labor intensive to install and maintain -- I've never been willing > to spend the extra time fiddling with my firewall that running LEAF > requires. > Tom;
I agree installation may be a problem; but what's the problem maintaining a LEAF box? Usually it needs no maintenance at all, I have some boxes around running for more than year without attaching it, package updates like adding a new shorewall can be done in a few minutes (if you do not need the docs in the shorewall configuration files). Preparing new package versions is improved with the move to make use of buildtool. There are remaining issues to simplify remote maintenance - and upgrading to a newer version (incl. heavy stuff like kernel updates). A solution may require a new packaging tool... Any ideas how to make installation/configuration easier? And what's wrong with the requirements to run a LEAF router? kp ------------------------------------------------------- This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170 Project Admins to receive an Apple iPod Mini FREE for your judgement on who ports your project to Linux PPC the best. Sponsored by IBM. Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
