I've set up central management of several hundred firewalls. Local compiles push to remote shorewall(6)-lite instances as intended.
It all works well. Even though I'm sharing /params & other config via symlinks from a common directory to minimize redundancy as much as possible, there's still a lot of diffs & general chaos. Room for lots of error. I'm about to place the various firewalls' config under local revision control -- likely git. I've looked at Shorewall docs and don't see either any integrated RCS, or integration hooks to git, for fw mgmt. Does the functionality already exist, with documents or examples? Ideally something as integrated as shorewall rcs_commit "messge text" or a sh shorewall reload -s <target> --rcs_commit would be really helpful. Can be done, of course, completely external to shorewall. ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
