Re: Proposal: enable stateless persistant network interface names
On Mon, May 11, 2015 at 09:29:21AM +0100, Jonathan Dowland wrote:
> On Fri, May 08, 2015 at 11:03:55PM +0200, Marc Haber wrote:
> > On Fri, 8 May 2015 13:33:06 -0700, josh@joshtriplett.org wrote:
> > >There are much better alternatives for most common cases.
> >
> > For example being?
>
> ufw is quite nice.
AFAICS (please correct me if I am wrong) ufw appears to be
designed for simple "block all access from everywhere on all
interfaces and explicitly allow exceptions for a few services
from everywhere" setups, but anything more complex appears to be
out of its scope.
So while it is surely nice and useful for the use case it was
designed for, I cannot see it as a replacement for traditional
iptables scripts if your setup is even slightly more complex.
Regards,
Karsten
--
Gem. Par. 28 Abs. 4 Bundesdatenschutzgesetz widerspreche ich der Nutzung
sowie der Weitergabe meiner personenbezogenen Daten für Zwecke der
Werbung sowie der Markt- oder Meinungsforschung.
Reply to: