Timothy Murphy: >> I must say, as a shorewall user, I am surprised >> at the complication of the resulting iptables, >> which makes me think it must be rather difficult >> to set up iptables without using an extra program like this. Bruno Wolff III: > If you understand a bit about networking it isn't hard to write a set of > rules for iptables. I would say it is more tedious than complicated. I don't find them too hard to work out. To set up filters, I read the iptables manual if I can't recall what to do. To use a utility, I have to figure out how it's implemented a control for what I want to do. Some are just plain nuts. -- Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.