In message <[EMAIL PROTECTED]>, Jim Sandoz writes:
> 
> ipf weaknesses (in my eyes):
>   - managability across multiple machines.

At our site we use a combination of ipfmeta, CVS, Makefiles, and 
Kerberos rsh or SSH to manage our kernel IPF packet filters. Along with 
a little documentation, even the junior members of my team can perform 
day-to-day maintenance and react to customer requests for our firewalls.


--
Cheers,                          Phone:  250-387-8437
Cy Schubert                        Fax:  250-387-5231
Team Leader, Sun/Alpha Team      Email:  [EMAIL PROTECTED]
Open Systems Group, CITS
Ministry of Management Services
Province of BC            
                    FreeBSD UNIX:  [EMAIL PROTECTED]


Reply via email to