iptables as a replacement for commercial enterprise firewalls
Posted by: Anonymous
on December 14, 2007 05:15 PM
My experience with the frontends - firestarter mainly - has been that they do a great job if you have a simple net setup but fall apart when you need several interfaces with varying levels of interaction/isolation. At a certain point you really need to get in there and look at the rules yourself to make sure that the setup is really what you intended.