Hi Matt, Matt Darfeuille schrieb am 26.12.2019 06:24 (GMT +01:00):
> Shorewall users, > > We are considering redoing the Debian release process and would like > some feedback from the community. > > If you are able to help us, your input would be appriciated on the devel > list (1). > > > 1) https://sourceforge.net/p/shorewall/mailman/message/36884842/ Happy Holidays to you and the rest of the development team. I'm not a developer and not subscribed to the devel list, so I'm posting my "two cents" here: To me as a user, the suggested changes all sound well and nothing to worry about. I would, however, suggest to go even a step further: Merge the shorewall6{-lite,} packages into the shorewall{-lite,} packages. They all depend on the iptables package, which includes both iptables and ip6tables anyway. You don't save all that much disk space if you choose not to install shorewall6{-lite,}. And chances are, if you're running a modern Debian release, you're really not concerned about a few hundred kilobytes or one megabyte of disk space. Similar to the ip6tables utility, if you have a machine where you really don't need an IPv6 firewall, you simply don't need to use the IPv6-targeted commands and there's no harm having them installed. It would, however, make it one step simpler to set up shorewall for both IPv4 and IPv6 and it would prevent beginners from simply forgetting about shorewall6. Cheers, Timo _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
