WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] IpTables config file for Dom0

To: "Heiko Wundram" <me+xen-users@xxxxxxxxxxxxx>
Subject: Re: [Xen-users] IpTables config file for Dom0
From: "Molle Bestefich" <molle.bestefich@xxxxxxxxx>
Date: Thu, 27 Apr 2006 02:30:24 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 26 Apr 2006 17:30:58 -0700
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=EEbqQlyZqdJRJc0jfVZTTczVrC/mnHRRXI1z71ogiZ4BJzZjjOIqij8ixXOEdtGfqSDGfQwU0U5lxtKJtuexZINsJL7ywzlSU6LBw1tsvSzjzof/NF7YZPNcJwP0gBdl7L4YIqCGrBOzafZ9O9ELQvTAxgKNabbhcr1pnmdVwxg=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <200604251947.18629.me+xen-users@xxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <057201c66880$408ec9c0$0201a8c0@comp1> <62b0912f0604250934h7aa8eb35y22984a855b4a6796@xxxxxxxxxxxxxx> <200604251947.18629.me+xen-users@xxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Heiko Wundram wrote:
> Molle Bestefich:
> > Non-GUI-managed firewalls?
> > When was that considered practical.. circa 1980?
>
> Huh? I don't use a GUI to manage our firewall, and that's pretty standard for
> all organizations I know around here.

If you had tried it, I don't think you would be going back to editing
configuration files :-).

> Using a GUI to manage a firewall (and
> hiding the inherent complexity that a firewall always is), is more errorprone
> than an administrator who knows what he's doing and can reasonably
> efficiently see what parts of the system a change to the firewall rules would
> affect,

I don't think that's true.
In fact, I'll bet that the non-GUI user introduces many more errors
because he has a lack of overview in comparison to the GUI user.

> additionally, an administrator can compute much shorter
> rulesets than an equivalent automated tool.

Who said anything about automated?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users