Re: 2.1.1 release candidate 1

Eric Shubert <[email protected]> Fri, 03 Jan 2014 08:53:37 -0700
Newsgroups gmane.comp.security.ipcop.devel
Organization Eric Shubert & Associates
Message-ID <[email protected]>
On 01/03/2014 02:35 AM, Olaf wrote:
>
>> Let me follow up. I see there's now a 2.1.1 iso, and it performs much
>> better cpu-wise as a VM. I'm disappointed to see though that the virtio
>> devices patch submitted last April does not appear to be in the release.
>> Gilles indicated back then that he would integrate it.
>>
>> Here is the patch again, for your convenience. Is there any possibility
>> of getting this included with this release? It would be very appropriate.
>
> The only VM patches I will apply are those that will remove features.
> There is a simple reason for that, I think VMs and network security are
> a poor match, so I am not about to support the combination.
>
>
> Olaf
>

I'm sorry to hear this, and disappointed that you feel it necessary to 
impose your thoughts on the rest of the community. Perhaps someone on 
your team can convince you to act otherwise.

Nobody's asking you to "support" virtio device drivers, only to allow 
them to be used, making IPCop more efficient in a VM implementation. 
These are simply a kernel device drivers, well supported by the linux 
kernel, much like the myriad of other kernel device drivers that you do 
include.

There's nothing which presently prohibits IPCop from being implemented 
as a VM, and many people do so. I think you'd be hard pressed to find a 
way to prohibit this from being done.

I won't discuss the merits and risks of using IPCop as a VM, and will 
allow other system administrators to evaluate those risks and benefits 
for themselves, and manage their situations accordingly.

As I strongly believe in software freedom, I will be considering the 
options of using pfSense (which includes these drivers) in place of 
IPCop. I'll also consider creating a VM spin of IPCop that is better 
tailored to VM implementations. This would simplify the need to include 
so many hardware devices (which I might consider to be a security risk, 
FWIW).

Thank you for your great work in the past. I would like to continue 
supporting IPCop in the future if it continues to be a good fit for my 
purpose.

-- 
-Eric 'shubes'


------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349831&iu=/4140/ostg.clktrk