> IMO, iptables has a steep learning curve. Nevertheless, IMO the learning 
> investment in iptables is worthwhile.

I agree!  I've written a couple iptables rules for my web server. 

> pfsense uses its own firewall language. So this would just add to an already 
> *huge* Linux learning burden (iptables plus *tons* of other stuff)


The barrier here is time. I'm pretty sure most of the things I want to do are 
mountains that other folks have already climbed.  

Al

Sent via mobile device

On Jul 17, 2013, at 5:48 PM, Allen <[email protected]> wrote:

> On Wednesday, July 17, 2013 05:00:16 PM Alan Jachimiak wrote:
>  
> 
>  
> I'm okay sacrificing a some resources for good looks, but pfsense only 
> suggests <512MB RAM for some isolated use cases.  That sounds pretty 
> efficient to me.  So, I'm going to bite the bullet and give pfSense a try.  
> (pfsense.org)  My current FreeNas based on FreeBSD has been OK to deal with 
> so, I think I've got a fighting chance.
> 
> I'm dissatisfied with the firewall in my Westell 6100 DSL modem/router and 
> have thought about alternatives including pfsense.
>  
> ISTM that a valuable Linux skill to possess is to be able to specify custom 
> firewall rules in the native firewall language (as opposed to using a 
> firewall GUI front-end). For Linux, this language is iptables. IMO, iptables 
> has a steep learning curve. Nevertheless, IMO the learning investment in 
> iptables is worthwhile. pfsense uses its own firewall language. So this would 
> just add to an already *huge* Linux learning burden (iptables plus *tons* of 
> other stuff).
>  
> I'd be interested if anyone has any counterarguments to this.
> 
> 
> --
> Phenom II X2 555 | Biostar TA890FXE | 2 x 4G DDR3 1333 | Maxtor 80G PATA | 
> GeForce 210
> _______________________________________________
> Mid-Hudson Valley Linux Users Group                  http://mhvlug.org
> http://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug
> 
> Upcoming Meetings (6pm - 8pm)                         Vassar College
>  Aug 7 - Scripting Your World with Python
>  Sep 4 - NoSQL and MongoDB
>  Oct 2 - OpenFlow: Open Standard for Networking Hardware
_______________________________________________
Mid-Hudson Valley Linux Users Group                  http://mhvlug.org
http://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug

Upcoming Meetings (6pm - 8pm)                         Vassar College
  Aug 7 - Scripting Your World with Python
  Sep 4 - NoSQL and MongoDB
  Oct 2 - OpenFlow: Open Standard for Networking Hardware

Reply via email to