In message <[EMAIL PROTECTED]>, Jim Sandoz writes:
> Cy Schubert - CITS Open Systems Group wrote:
>
> > In message <[EMAIL PROTECTED]>, Jim Sandoz writes:
> >>ipf weaknesses (in my eyes):
> >> - managability across multiple machines.
>
> >
>
> >
> > At our site we use a combination of ipfmeta, CVS, Makefiles, and
> > Kerberos rsh or SSH to manage our kernel IPF packet filters.
>
>
>
> my point exactly. :*) x 10.
Jim,
Even though you say you're not in the GUI camp, you in fact would like
IPF to have a GUI. Have you tried isba? Mind you, a Web based approach,
using HTTPS and passwords of course, would be a better approach.
Unfortunately, as sexy as GUI's are, when you're managing a virtual
firewall, e.g. a group of hosts that should be behind a firewall but
due circumstances, (politics) beyond one's control, a GUI in the
traditional sense would actually add to an SA's workload, not to
mention frustration level for those of us who have a good command of
vi. (Gawd I hate mouse clicking my way to completing a task, mind you
talk to some of the junior SA's I know and they'd tell you the complete
opposite. I suppose it's personal preference and acquired taste.)
--
Cheers, Phone: 250-387-8437
Cy Schubert Fax: 250-387-5231
Team Leader, Sun/Alpha Team Email: [EMAIL PROTECTED]
Open Systems Group, CITS
Ministry of Management Services
Province of BC
FreeBSD UNIX: [EMAIL PROTECTED]
