Actually, fwbuilder is really nice, but it would *NOT* compile on Solaris 7! Even the prerequisite packages would not compile!!! What good is "we compiled this on Solaris 8 but we don't support it" type-a-deal, when they won't even provide the package and package prerequisites for Solaris? I'm really dissapointed at the fwbuilder team. I don't like the fact that they are assuming *EVERYONE* is running Linux.
On Linux of course it runs nice, looks nice, and seems to be pretty powerful. But comparing fwbuilder managing iptables and Isba managing IPFilter is truly like comparing apples and pears. fwbuilder is designed to be one-size-fits-all GUI for managing different firewall solutions. Isba on the other hand is designed with singular purpose in mind, and that is to admin either clustered or single IPFilter deployments; I dare say it does its job well. And looking a lot like CheckPoint GUI is of great help to those of us who use it a lot. For those rare occasions when Isba can't do something with IPFilter (I have not stumbled upon this situation yet!), it will let you create a "manual rule" and insert it into the GUI representation of the ruleset. It actually enabled me to learn about all the different options in IPFilter, by looking at what was available in Isba and then reading Mr. Dibowitz's HOWTO. I even went as far as to make packages for Isba and all its prerequisites on Solaris 7. It's not the most recent version, but everything is precompiled and installs nice and clean, the sysadmin way; the packages even check for prerequisites. > I have been looking at fwbuilder(fwbuilder.sf.net) for this, > have you played with it? And what are your favorate features > from Ibsa? I manage a few ipfilter based firewalls and am > looking at what is avalable for guis.
