On Fri, Feb 17, 2006 at 13:56:41 +0000, Timothy Murphy <tim@xxxxxxxxxxxxxxxxxxxxxx> wrote: > > I must say, as a shorewall user, I am surprised > at the complication of the resulting iptables, > which makes me think it must be rather difficult > to set up iptables without using an extra program like this. If you understand a bit about networking it isn't hard to write a set of rules for iptables. I would say it is more tedious than complicated.