Re[2]: [Security Firewall] Florins Firewall

okay... So, where shall we start from ?

-- 

> Shade wrote:

>> As long as the goal of what MNF is supposed to be doesn't change, I'm
>> all for it. I have always felt that the objective of the MNF project
>> was to produce an enterprise level firewall using strictly Open Source
>> technologies. There are literally hundreds of Open Source firewalls
>> designed for small or home networks. However, once you get into some
>> of the more detailed rulesets and filters required to handle something
>> on a much larger scale, I've found that few (if any) compare to MNF's
>> capabilities combined with its ease of administration. I've always 
>> liked the fact that I could pass on basic firewall rule changes to a
>> junior tech with no Linux experience (but not to an MCSE, of 
>> course).... :)

> For me, the killer features of MNF (1) have been the ability to 
> (relatively) easily manage multiple WAN IP addresses, and relatively
> granular firewall rules. Of course, with MNF 1, I had to add the NIC
> aliases manually, but everything else has worked through the web interface.

> MNF2 has me practically drooling over these key features:

> * ability to manage NIC aliases in the web interface
> * ability to create any arbitrary number of zones, including wifi and dmz
> * built-in OpenVPN 2.0, and built-in certificate manager (not yet 
> deployed, I'm still running the February beta)
> * traffic shaping, to prioritize VoIP and de-prioritize BitTorrent 
> (haven't yet deployed a working version of this, though)
> * urpmi for keeping up-to-date.

> This last point suggests keeping it based on Mandriva, but there are
> certainly lots of alternatives.

> How about we call it "Florin's Firewall?" ;-)