On Wed, 28 Sep 2011 17:40:20 +0200
Mark van Dijk <[email protected]> wrote:

> Hi,
> 
> On Wed, 28 Sep 2011 07:07:23 -0700
> Tom Eastep <[email protected]> wrote:
> 
> > I'm frankly not interested in having to document and support
> > different flavors of configuration representation. I would be
> > willing to include hooks in the compiler for doing the conversion
> > and for matching up filenames and line numbers in the error
> > messages to where an error or warning occurred in the original
> > source text, but I would prefer that these alternate configuration
> > formats be separate products that are documented, maintained and
> > supported by their creators.
> 
> Actually, I'd like to go one step further and suggest to not bring
> this extra overhead into the project. It is a clear example of
> putting the cart in front of the horse.

I agree.  Shorewall is easy to configure; all xml would do is make it
harder.  If somebody thinks this is not the case, they need to learn
how to use an editor.  GUI is an unnecessary additional layer of
abstraction, a potential source of errors, an expanded attack surface,
and a maintenance burden.

Attachment: signature.asc
Description: PGP signature

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to