what comes after firehol?

Paul Fox <[email protected]>
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>
so, i really like firehol:  both the philosophy behind it and the
implementation, which seems to work pretty well.

i've used it to protect individual hosts for years, and recently made
some changes to let it create the firewall script for my openwrt
router, without needing to actually run on the openwrt box.

but i also like my firewall maintenance tools to be currently
maintained.  :-/ :-)  that doesn't seem to be happening -- the last
release was almost three years ago.

are there any other tools similar to firehol i should be aware of?

i've used fwbuilder in the past, and while it works well, and is
clearly supported, i always feel like it's way more sophisticated than
i need, and i usually forget how to use its UI in between usages.

my requirements aren't too special, though i do need support for
multiple interfaces -- i have different filtering rules for traffic
going between wan <-> lan, wan <-> wlan, and lan <-> wlan.  and i'm
starting to think about ipv6, but have no concrete need for that yet.

is firehol still the right answer for simple firewall creation?

paul
=---------------------
 paul fox, [email protected] (arlington, ma, where it's 49.1 degrees)

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.