In message <[EMAIL PROTECTED]>, Jim Sandoz writes:
>
> ipf weaknesses (in my eyes):
> - managability across multiple machines.
At our site we use a combination of ipfmeta, CVS, Makefiles, and
Kerberos rsh or SSH to manage our kernel IPF packet filters. Along with
a little documentation, even the junior members of my team can perform
day-to-day maintenance and react to customer requests for our firewalls.
--
Cheers, Phone: 250-387-8437
Cy Schubert Fax: 250-387-5231
Team Leader, Sun/Alpha Team Email: [EMAIL PROTECTED]
Open Systems Group, CITS
Ministry of Management Services
Province of BC
FreeBSD UNIX: [EMAIL PROTECTED]