Re: logging

Shorewall Geek
Sun, 30 Nov 2008 02:30:12 -0000

> d)  This intrigues me.  Why Shorewall-perl?  debugging support?  This is
> the first I heard someone promoting the perl implimentation.

a) The shell implementation hasn''t had any active development in two
years. So all new features introduced in the last year and a half are
only available in the perl version.
b) The perl implementation is an order of magnitude faster compiling the
firewall configuration.
c) The perl implementation is an order of magnitude faster instantiating
the firewall configuration.
d) The perl implementation doesn''t disable new connections during
start/restart.
e) The perl diagnostics are much better and the perl implementation
catches many more configuration errors at compile time.