Brian J. Murrell wrote:
> On Fri, 2007-02-02 at 10:54 -0800, Tom Eastep wrote:
>> Shorewall can already do this. It's what Shorewall Lite is all about.
>>
>> See http://www.shorewall.net/CompiledPrograms.html#Lite
> 
> Hrm.  How much of the "grunt work" is offloaded from the "firewall"
> system though?  I find rule compilation quite slow on my puny little
> firewall system, which is why I want to move it off to a more powerful
> "administrative" system and have the firewall do nothing more than run a
> bunch of iptables rules.
> 
> Is this an accurate description of the workload split in Shorewall Lite?

Yes.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to