Gabriel,

fwbuilder is a great tool but too iptables-centric. The PF module
does not implement much of the PF philosophy. Portion of the pf.conf
it produces seems to simulate an iptables conf. The PF functionality
it supports seems to be quite outdated.
I had trouble with global rules taking precedence over local rules
(could to be a PF module bug).
My evaluation experiences are based on a more complex fw configuration with
several DMZs.
If you could investigate further, Gabriel, and enhance the PF module,
this could be a great job.


Axel

Am Freitag, 24.10.03 um 05:00 Uhr schrieb Gabriel WARE:

Gabriel,
fwbuilder has a PF module. I have never used fwbuilder but perhaps
others on this list who have can share their experience.

http://www.fwbuilder.org/

Chris

It wasn't for my own use, I was seeking for something I could do :)


I didn't find it (in fact : I found it, but it seems that I made a mistake
while copying the url because I was being redirected to "sofi" [if I
remember correctly] project's homepage and it wasn't what I expected),
sorry to bother you guys, I should have search harder.


But fwbuilder seems to be really great [I think that I cannot do something
better ;].


Now, I have to find something else to do.

Thanks a lot for your replies.
See you soon.

--
Gabriel WARE

tel  :  06 64 35 91 19
mail :  [EMAIL PROTECTED]
        [EMAIL PROTECTED]
CV   :  http://etud.epita.fr:8000/~ware_g/cv.html
        http://acidroot.skreel.org/cv.html


Computing @ Chaos Claudius    -Motivation by consistency: Cocoa
Axel Rau, Frankfurt, Germany    Phone:49-69-951418-0,  Fax: -55
email:[EMAIL PROTECTED],Mime ok,MS-Word-documents only as HTML



Reply via email to