Re: [Leaf-devel] Grand New Firewall Paradigm

[Mike Sensney]

<x-flowed>At 10:30 AM 01/05/2001 -0800, Scott C. Best wrote:
> > Just a thought, you could extend this a little by adding:
> >     [SERVICE]_HOST_IP="xxx.xxx.xxx.xxx"
> >     [SERVICE]_HOST_NAME="host.name"
> > This would add some extra design flexibility for the firewall
> > maintainer but should be easy to implement.
>
>         Yes, very good. Though I would skip the HOST_IP
>definition as it is the work of the supervisory script to
>determine that number invisibly from the user.
>         The ultimate intent is to let the end user configure
>their firewall by connecting a *service* to a *machine name*.
>No IP#'s, no port #'s, no MACID's, nothing layer-3 or below
>at all.

What about DNS servers? They are best referred to by IP. Especially 
if they belong to your ISP.



_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/mailman/listinfo/leaf-devel
</x-flowed>