[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Statefull packet inspection in SuSEfirewall2



On Monday 24 July 2006 07:08, Richard Ems wrote:
> Ludwig Nussel wrote:
> > I'd expect the 10.1 SuSEfirewall2 rpm to work on 9.3, you don't need
> > to update the whole distro.
>
> On 10.1 I have SuSEfirewall2-3.4_SVNr142-5  (Sun 23 Apr 2006)
> on  9.3        SuSEfirewall2-3.3-18.4       (Thu 30 Jun 2005)
>
> Aren't there any new netfilter/iptables features introduced on 10.0 or
> 10.1 used by SuSEfirewall2-3.4_SVNr142-5 ?

I usually find Shorewall (shorewall.net) much easier to deal with for 
anything but the most simple of firewalls.  Its also vastly
better documented.  It still relies of netfilter, but the author really
knows his stuff, and makes it easy to understand.

-- 
_____________________________________
John Andersen

Attachment: pgpl2OU19wrFE.pgp
Description: PGP signature