Re: OpenBSD 'pf' port (was FreeBSD heap to Linux)

[merlyn () stonehenge com (Randal L. Schwartz)]

> > > > > "Chris" == Chris Smith <chris.rs () xtra co nz> writes:

Chris> Have you tried Firehol <http://firehol.sf.net> at all? A nice IPTables 
Chris> generator with human readable syntax. Provided me with plenty of power and 
Chris> has a lot of security features (e.g. rate limiting) built in.

There's no excuse these days for unreadable syntax from the tool
itself.  If something needs a wrapper, it's broken.

One "sendmail.cf" is enough in anyone's lifetime.

-- 
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn () stonehenge com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html