Mailinglist Archive: opensuse (4348 mails)

[Togan Muftuoglu <toganm@xxxxxxxxxxxx>]

* John Pettigrew; <john@xxxxxxxxxxxxxxxx> on 28 Oct, 2002 wrote:
> comes with the Pro version of SuSE), try Shorewall
> (http://www.shorewall.net/). It's easier to set up and configure (IMO) and
> has preconfigured setups for 2-interface computers. Read the config
> instructions and you should only have to change a few lines in the config
> files. I'm afraid that the linux tools for connection sharing do require
> editing of config files - there's nothing as easy to set up as the Win
> programs, but you do get *vastly* more secure systems out of it!

Sorry to jump here but there is no such thing as "preconfigured
firewall". Security is not IMO click "Yes" click "Accept" type of thing.
I just had a look at the www.shorewall.net site especially for the so
called preconfigured 2 interface and 3 interface setups. Looks to me
there are many files that have to be configured (read edited with a text
editor).

SuSEfirewall2 has one (1) configuration file you can edited via text
editor or via GUI ( YaST2 firewall module) so for Microsoft Windows GUI
fans there is a GUI configurator for SuSEfirewall2 along with the
explanation.

The only thing that shorewall has as an extra benefit is there is a
how to document.

Yet SuSEfirewall2 has it also now 

http://prdownloads.sourceforge.net/susefaq/firewall2.pdf?download
http://dinamizm.ath.cx/articles/firewall2.pdf
ftp://dinamizm.ath.cx/documents/firewall2.pdf

Yet IMHO SuSEfirewall2 is easier to setup while allowing real complex
configurations.

Just my 0.2 ¢
--

Togan Muftuoglu
Unofficial SuSE FAQ Maintainer
http://dinamizm.ath.cx