corbenW  | 2007-09-28
Security at it’s most
Most firewall configuration tools for Netfilter will have to be ran, maintained, and closely monitored to do their work. That’s what Shorewall will not need – that’s why I found it useful – because it will be ran only once, and that’s when you do all the work. The neat feature that made me a fan was that, once ran, and configured, it will modify the Netfilter under Linux, and the code will not have to be ran again – only useful for monitoring the status. Unfortunately, it is not very user-friendly, meaning that if you don’t know what’s going on inside a firewall, and how you want it to react, then Shoreline Firewall will prove to be a milestone to hard to reach.