Mailinglist Archive: opensuse-factory (1324 mails)

< Previous Next >
Re: [opensuse-factory] Re: leap42 - minimum server pattern has become too minimum
On Fri, Oct 23, 2015 at 7:32 PM, Dominique Leuenberger / DimStar
<dimstar@xxxxxxxxxxxx> wrote:
But a firewall is quite an important part of any installation
really, I would consider an installation, even if minimal, without a
firewall, quite irresponsible. But selecting it back is easy, and it
is indeed the minimal pattern, which strives to be minimal. Pulling
in
full perl would indeed hurt that objective.


Really? Sorry - no: I have NEVER worked in an enterprise where the
firewall was not centralized BEFORE the server farm... maintaining
firewall rules in every single instance is certain to give you
headaches which you do not need.

Do yourself a favor, get an IDS/IPS and live happily ever after. THEN
we talk about serious implementations with servers.

What Jim said, plus:

SUSE Firewall is nice for what it can do... but installing /
configuring it on every single VM instance in your network is mind
numbing and means you do your job in a way to extort money from your
employer - and not to do a good job.

Ok, you don't like working with SUSE firewall, then don't talk about it.

The whole point of it is that it's quite easy to set up for simple
stuff (most servers will have simple firwall setups).

But regardless of preference, firewall by default -> no firewall by
default, is a change that can bite a lot of people unaware. Hence my
suggestion to put it on the release notes.
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
This Thread