Firewalld

[Eric H. Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Mon, Aug 25, 2014 at 03:40:10PM -0600, Pete Travis wrote:
> On 08/25/2014 02:17 PM, Eric H. Christensen wrote:
> > On Mon, Aug 25, 2014 at 01:13:46PM -0600, Pete Travis wrote:
> > > Here's my idea:  In the security guide, give an overview, instructions
> > > on how to lock down to deny-all, general instructions on adding back,
> > > and link out to the Networking Guide. In the NG, give a full overview -
> > > network security should be an inherent part of network configuration.
> > > In others, include the command to open a port for the service being
> > > documented where appropriate.
> >
> > I really dislike the idea of spreading information out into different
> > guides.  Users think they've got the entire story only to miss another
> > aspect elsewhere.
> >
> Right, it's the spreading out that bothers me too. Service config here,
> network config here, firewall config there.  I *don't* like the idea of
> managing similar content in different places, though.  The wiki doesn't
> really fix that problem; includes work there just as well as in docbook,
> there's just a broader scope.  There are valid concerns about the
> administrative overhead of our publishing stack, vs the 'just write'
> ethos of a wiki - but I think that even with a wiki we would need to
> have discussions about structure and scope.

So how about this...  Instead of having these big, fat guides that contain a lot of information on a lot of different topics, we start breaking down these guides into smaller chunks.  Think "Firewall Guide" which would talk specifically about iptables and firewalld.  They likely would be less work to maintain (although there would be more of them) since, potentially, it would have less stuff to deal with.

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project

sparks at fedoraproject.org - sparks at redhat.com
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=pbUG
-----END PGP SIGNATURE-----