On Sunday 23 December 2007 10:27:22 pm Miles Brennan wrote:
The shorewall package is an application designed to assist users in configuring iptables, in fact the structure of the files from what I have seen, mimic the iptables scripts to some extent.
Exactly. I found it quite difficult to set up iptables directly (this was before I read your HOWTO!) and more importantly I had no confidence that my iptables gave me reasonable security.
I'm not sure, as I said earlier, to what extent shorewall has become the standard way of setting up iptables. But I certainly think, if you are lazy like me, that it saves a lot of brain cells.