John Andersen:
I just use Shorewall. The documentation is excellent, comes with most scripts you will ever need, but it is so easy to add your own.
Already have the scripts. That's even easier! The scripts take care of all the static stuff & shorewall can handle the dynamic bits with fail2ban's help. Additional benefit to scripts is that there are no surprises on updates. Not long ago an unsupervised system update elsewhere removed shorewall, etc., & installed SuSEFirewall2 because of an error in a chain of dependencies.
I found the suse firewall pretty obtuse an unwieldy for anything but the basics like allowing samba etc.
It doesn't seem to behave as expected. And seems too inflexible as well. -- jd -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org