Thomas Harold wrote:
>
> What are the advantages to running your firewall in Dom0 instead of a 
> DomU?  Does it make it easier to DNAT to DomUs on the same server?

For me, the advantage was that I now have one less system to administer.
Plus, the overall configuration is simpler.

> 
> If I'm running the firewall software in a DomU and I have 2 identically 
> configured boxes, it seems like it would be easier to migrate the 
> firewall DomU to another box if we run into hardware issues on the first 
> box.

That's certainly true.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to