Talk:Shorewall: Difference between revisions
No edit summary |
No edit summary |
||
Line 28: | Line 28: | ||
Netfilter võimalused. | Netfilter võimalused. | ||
•stateless packet filtering (IPv4 and IPv6) | •stateless packet filtering (IPv4 and IPv6) | ||
•stateful packet filtering (IPv4 and IPv6) | •stateful packet filtering (IPv4 and IPv6) | ||
•all kinds of network address and port translation, e.g. NAT/NAPT (IPv4 only) | •all kinds of network address and port translation, e.g. NAT/NAPT (IPv4 only) | ||
•flexible and extensible infrastructure | •flexible and extensible infrastructure | ||
•multiple layers of API's for 3rd party extensions | •multiple layers of API's for 3rd party extensions | ||
•large number of plugins/modules kept in 'patch-o-matic' repository | •large number of plugins/modules kept in 'patch-o-matic' repository |
Revision as of 12:17, 26 April 2010
Mille poolest Shorewall eristub teistest analoogsetest? Kas on mingi põhjus, miks just seda valida? Kas on midagi, mida netfilter võimaldab, kuid shorewall ei? Mernits 14:36, 24 April 2010 (EEST)
Vastused küsimustele
Mille poolest Shorewall eristub teistest analoogsetest?
Kahjuks ei ole minu linuxi põhiste tulemüüritarkvarade kasutusnimekiri kuigi pikk :-) Võimalik, et on sarnane toodet tehtud ja funktsionaalsuselt natuke kentsakam või parem ...
Kindlasti eelistavad paljud kasutada graafilist tulemüürireeglite haldamise liidest.
Võiks erisutda struktuuri poolest.
Kas on mingi põhjus, miks just seda valida?
Kindlasti tekib parem ettekujutus toimuvast, kui kõik reeglid on eraldi failides.
Kas on midagi, mida netfilter võimaldab, kuid shorewall ei?
Eelinfo:
Netfilter võimalused.
•stateless packet filtering (IPv4 and IPv6) •stateful packet filtering (IPv4 and IPv6) •all kinds of network address and port translation, e.g. NAT/NAPT (IPv4 only) •flexible and extensible infrastructure •multiple layers of API's for 3rd party extensions •large number of plugins/modules kept in 'patch-o-matic' repository