On 12-12-24 12:55 PM, Karl O. Pinc wrote:
> 
> ferm is strictly syntactic sugar for iptables,

Indeed.  That's a nice way to put it.  I would put ferm somewhere
between dealing with iptables directly and something like Shorewall in
terms of rule building.

> I don't know what "multi-wan management" is (if not routing
> and (S)NAT/MASQUERADE/etc.).

It's basically routing.  Being able to configure two default routes in
different modes -- active/active with a ratio of use or active/passive, etc.

> ferm outputs iptables.  You can install the resulting rules
> anywhere.  (Assuming you write rules compatible with the target
> system.)

Indeed.  But one has to write the management of installing rules
remotely oneself, which is fine if one wants to do that sort of thing.

Cheers,
b.


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
openwrt-users mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-users

Reply via email to