[plug] Routing and firewalls

[Dean Bergin]

Hello Bill,

Thanks for sharing.

As a network engineer, I'm not normally exposed to these sorts of tools (I
normally operate on commercial grade/proprietary products like firewalls or
routers) so I often don't see much value in operating a host-level firewall
unless it's a server and/or said server participates in routing and/or
carries data plane traffic and you don't trust upstream.

I also think that these types of tools should be able to be abstracted by a
GUI or web-based interfaces to allow at least basic usage otherwise they
get resistance and uptake is low because of it.

I guess it depends on what you're trying to achieve/solve but its good to
know that each iteration of the open source firewall/filtering tools seems
to be improving.


Kind Regards,

*Dean Bergin*.

On Wed, 21 Feb 2024, 22:23 Brad Campbell, <brad at fnarfbargle.com> wrote:

> ipchains -> iptables -> nftables.
>
> I wonder how many other new routing languages I'll have to learn before I
> finally turn in my cards?
>
> Now, having said that, after hiding under a desk with my fingers in my
> ears singing "nah nah nah" I wrote my first set of nftables rules today.
> It turns out not to be as arcane as it looks.
>
> Still, change is inevitable.
>
> Brad
> _______________________________________________
> PLUG discussion list: plug at plug.org.au
> http://lists.plug.org.au/mailman/listinfo/plug
> Committee e-mail: committee at plug.org.au
> PLUG Membership: http://www.plug.org.au/membership
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20240222/674434dd/attachment.html>