Re: Debian Wheezy
"Tsaousis, Costa" <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <CANL+VpaaKmjz8jX_pORvNudRaoNbrM-Oo2WQgztW2zvW6_1qZQ@mail.gmail.com> |
Welcome Rich... The latest release can be obtained from: http://firehol.org/download/latest/ The development version with this: git clone https://github.com/ktsaou/firehol.git firehol.git In both cases in sbin/ you can find firehol.in, fireqos.in and link-balancer.in These are the final executables you need. They are just shell scripts. Run them (even without installation). If one of their depedencies is missing (a system command they need is not installed) they will complain. Keep also in mind that the recent features, (ipsets, iptraps, synproxy, huge speed optimizations, a lot better iptables rules generation, conntrack helpers configuration) only exist in the development version. I use this development version on production systems (I don't say you should do so, bugs may exist - you can try them though - they are consistent and in good shape - we don't have any issues / bugs open at the moment - although not tested that much to consider them production quality). Costa On Tue, Feb 24, 2015 at 11:10 PM, Whit Blauvelt <[email protected]> wrote: >> I've just come across firehol and it looks great, simple yet powerful. > > That's my experience. > >> I'm not massively keen on compiling from source because this is time >> consuming (I have 7 servers) , requires packages I don't want on my >> servers for security reasons (compilers), and all has to be repeated if a >> security release comes out, it's hard to maintain. > > For what it's worth, the ./configure && make && make install cycle for > FireHOL is very fast. Also, the results aren't compiled, but consist of bash > scripts. > > Whit > _______________________________________________ > Firehol-support mailing list > [email protected] > http://lists.firehol.org/mailman/listinfo/firehol-support