Firewall

[Matthew Miller]

On Mon, Dec 06, 2010 at 08:27:00PM +0100, Phil Knirsch wrote:
> Basically it's a statefull firewall daemon now that allows us to support 
> and implement a lot of those features which have been so critically 

Does this *really* need to be implemented as yet another constantly-running
daemon? Because by its nature, iptables already maintains its state, and it
seems unnecessary to have another program running in userspace to do the
same thing.




-- 
Matthew Miller <mattdm at mattdm.org>
Senior Systems Architect -- Instructional & Research Computing Services
Harvard School of Engineering & Applied Sciences