[nzlug] Server Consolidation

[Michael Adams]

On Wed, 14 Nov 2007 01:08:33 -0800
Nevyn wrote:

> On Nov 14, 2007 12:07 AM, Daniel Lawson <daniel at meta.net.nz> wrote:
> ...
> > To the poster who bemoaned the lack of gui based firewall tools:
> >
> > * firestarter (http://www.fs-security.com/) is a gui tool for
> > firewall admin* fireflier (http://fireflier.sourceforge.net/) is
> > another one, but seems like it's out of active development now
> > * fwbuilder (http://www.fwbuilder.org/) is another gui tool, which
> > also claims support for  OpenBSD, NetBSD, FreeBSD and MacOS X (eg,
> > not just iptables)
> > * ebox (http://ebox-platform.com/) is a whole stack tool for network
> > service administration.
> > * guarddog and guidedog are a pair of KDE based tools that do
> > varying levels of firewall management
> > * ditto kmyfirewall (http://kmyfirewall.sourceforge.net/)
> 
> Hi Daniel
> 
> Great post. My main issue with the gui configuration tools for
> firewalls has been the lack of abstraction. Most of them require you
> to know iptables. That's probably one of Windows and Mac OS X's
> strengths - isolating a lot of the inner workings from the general
> user. While a bad thing in technical users, it's brilliant if you
> "just want to get the job done".
> 

IPTables has a group of macros for the most common tasks that plebs like
us could want. Also the config files are self annotated.

-- 
Michael

All shall be well, and all shall be well, and all manner of things shall
be well

 - Julian of Norwich 1342 - 1416