Re: logging

Tom Allison
Sun, 30 Nov 2008 13:13:17 -0000

Shorewall Geek wrote:
> Tom Allison wrote:
>
>> d)  This intrigues me.  Why Shorewall-perl?  debugging support?  This
is
>> the first I heard someone promoting the perl implimentation.
>
> a) The shell implementation hasn''t had any active development in
two
> years. So all new features introduced in the last year and a half are
> only available in the perl version.
> b) The perl implementation is an order of magnitude faster compiling the
> firewall configuration.
> c) The perl implementation is an order of magnitude faster instantiating
> the firewall configuration.
> d) The perl implementation doesn''t disable new connections during
> start/restart.
> e) The perl diagnostics are much better and the perl implementation
> catches many more configuration errors at compile time.
>
>

This should be a large red label on the beginning of the README (or at
least the Debian install).  I see this mentioned in the docs, but I
missed it.  Sounds like the shell is deprecated. Should people think if
migrating?

OK, now that I''ve already gotten it implemented in the shell version I
have to re-do this for perl.  I know that there are some command
differences in there, but I wasn''t paying attention to them thinking
that I wasn''t going to be required to migrate.  I don''t
suppose there is
a short list of what to check?