On Fri, Oct 23, 2015 at 7:32 PM, Dominique Leuenberger / DimStar
But a firewall is quite an important part of any installation really, I would consider an installation, even if minimal, without a firewall, quite irresponsible. But selecting it back is easy, and it is indeed the minimal pattern, which strives to be minimal. Pulling in full perl would indeed hurt that objective.
Really? Sorry - no: I have NEVER worked in an enterprise where the firewall was not centralized BEFORE the server farm... maintaining firewall rules in every single instance is certain to give you headaches which you do not need.
Do yourself a favor, get an IDS/IPS and live happily ever after. THEN we talk about serious implementations with servers.
What Jim said, plus:
SUSE Firewall is nice for what it can do... but installing / configuring it on every single VM instance in your network is mind numbing and means you do your job in a way to extort money from your employer - and not to do a good job.
Ok, you don't like working with SUSE firewall, then don't talk about it. The whole point of it is that it's quite easy to set up for simple stuff (most servers will have simple firwall setups). But regardless of preference, firewall by default -> no firewall by default, is a change that can bite a lot of people unaware. Hence my suggestion to put it on the release notes. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org