On Sunday, 2002-12-08 at 16:23:37 -0500, Marc Spitzer wrote:
> On Sun, 08 Dec 2002 15:32:57 -0500
> Vedran Bender <[EMAIL PROTECTED]> wrote:

> > Even though GUI is not a necessity, it would be nice to someday see
> > the work of Mr. Berthomier and Mr. Reed join into one easy to install
> > integrated package.  From my own experience, I believe that IPFilter,
> > SSH and Isba+VLog make for a very scalable and powerful
> > cluster-managed firewall solution.


> I have been looking at fwbuilder(fwbuilder.sf.net) for this, have you played with 
>it?  And what are your favorate features from Ibsa?  I manage a few ipfilter based 
>firewalls and am looking at what is avalable for guis.

Let me throw in my 0.03 (adjusted for inflation) in favor of fwbuilder.
It is not perfect (I just send two mails to the fwbuilder mailing list,
one about a feature I would like to have, the other about a bug in the
new "rule shading" checker), but it makes ipfilter rulesets easier to
manage. It looks very similar to FW-1's GUI (probably no coincidence).

If more people used this with IPFilter (it also speaks iptables and pf),
the IPFilter compiler in fwbuilder would get a better shakeout...

I use fwbuilder to manage the firewall (FreeBSD/IPFilter) and the IPSec
router (Debian 3.0/IPTables) for a client. It's very nice to manage the
two in one ruleset, even though they are quite different platforms.

HTH,
Lupe Christoph
-- 
| [EMAIL PROTECTED]       |           http://www.lupe-christoph.de/ |
| Big Misunderstandings #6398: The Titanic was not supposed to be        |
| unsinkable. The designer had a speech impediment. He said: "I have     |
| thith great unthinkable conthept ..."                                  |

Reply via email to