Well, given that everything else on the Stone-Age system is functioning
with no problem, I'm optimistic that a corresponding version of Shorewall
might actually work for me.

... and if not, then I can uninstall it and live with my atavistic system,
as is.

Does no one know which Shorewall version was current during the CentOS-4.8
Dark Ages?


-- 
 Hippo Man
 hippo...@gmail.com
 Take a hippopotamus to lunch today.


On Wed, Dec 26, 2018 at 7:10 PM Damiano Verzulli <dami...@verzulli.it>
wrote:

> On 27/12/18 00:25, Lloyd Zusman wrote:
> > [...]
> > I'm running on the ancient CentOS-4.8,
> > [...]
> > Thank you for any pointers or suggestions.
>
> When I'm asked to protect "stone-age" systems, I generally do my best in
> *avoiding* touching them at all. I prefer to "sandboxing" them, inside a
> virtual-machine (or, if possible, a "container"), and then add a dedicated
> firewall in front of them (via an additional, dedicated VM). Considering
> that Shorewall is perfectly able to work in "bridged" mode, such a firewall
> can be fully transparent from a network point of view. So, while slightly
> increasing the complexity of the overall setup (due to the additional
> firewall VM), you gain the very important advantage to protect your
> "legacy" system with a current shorewall version AND without any change in
> related "legacy" system.
>
> My 0,02€
>
> Bye,
> DV
>
>
> P.S.:
>
> > I'm running on the ancient CentOS-4.8, and there is no feasible way to
> > upgrade this system in the forseeable future.
>
> Sorry, but it looks like your real problems are much worse than installing
> shorewall... :-(
>
> --
> Damiano Verzulli
> e-mail: dami...@verzulli.it
> ---
> possible?ok:while(!possible){open_mindedness++}
> ---
> "Technical people tend to fall into two categories: Specialists and
> Generalists. The Specialist learns more and more about a narrower and
> narrower field, until he eventually, in the limit, knows everything about
> nothing. The Generalist learns less and less about a wider and wider field,
> until eventually he knows nothing about everything." - William Stucke -
> AfrISPA
>   http://elists.isoc.org/mailman/private/pubsoft/2007-December/001935.html
>
>
>
>
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to