[Shorewall-devel] Sample Files Improvement

Tom Eastep
2005-05-27T18:51:08Z

Cristian Rodriguez wrote:

>  Im already "hacking" the Samples.
>
> what ''s the change??
>
> well.. I''m proposing  a "centralized" " config
file"
> /etc/shorewall/params where all the interfaces options and basic stuff
>  are defined using Shell variables with commented instructions.
>
> but probably somebody have a good reason to NOT do this change..
>
> any comments?

Yes -- we tried that and *it was a disaster*. It allows people to get their
first firewall up a LITTLE bit easier *without knowing one damed thing*
about Shorewall. Then the first time that they wanted to do something that
wasn''t covered by a shell variable in /etc/shorewall/parms there was a
complete paradigm shift and they had to learn what Shorewall is really about.

It was a support nightmare.

It is *much better* to make newbies learn the basics of Shorewall from the
beginning. As I say on the Shorewall home page, if you are looking for a
point-and-click set-and-forget firewall, SHOREWALL ISN''T FOR YOU.

Please don''t make this change -- you will regret it.

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key