[Firehol-support] Firehol Status?

[Mike Pountney]

I'm using firehol in over 40 production installations, in both 
local-only and routed configurations, hosting multiple protocols.

The only problem I've had with it has been that the 'latest' release 
(1.226) is rather out of date in it's idea of UNROUTABLE_IPS - use 
PRIVATE_IPS or your own definition if you are stuck with 1.226.

This looks to be fixed in CVS, and indeed the project does look still to 
be very much active in the repository.

Does anyone know why there hasn't been a tarball/packaged release for so 
long though?

mike

{btw, Daniel... Hello! Been a while, eh? How are you?!}

Daniel Pittman wrote:
> Costa Tsaousis <costa at tsaousis.gr> writes:
>   
>> firehol firehol wrote:
>>     
>>> Hello, Everyone:
>>>
>>> I've been looking at fireehol to configure the firewalls on my
>>> machines.
>>>       
>
> [...]
>
>   
>>> Do people use this firewall on real, working mail and DNS servers?
>>> Am I making some sort of mistake in my configs? I would love to get
>>> firehol working for my purposes.
>>>       
>> I use it in a data-center with several hundreds of linux machines,
>> including high performance DNS and mail servers.  I am sure lots of
>> other people are using it in a similar way without problems.
>>     
>
> Yes.  I use it in a large number of installations, service a wide range
> of protocols, including mail and DNS.  It works perfectly in these
> cases; we have no unexpected failures.
>
> The largest is a service that provides hosting -- web, email and DNS --
> and moves around 400KB/second of traffic, 24x7.  No problems there.
>
> Regards,
>         Daniel
>   

-- 
 Mike Pountney, Systems Administrator,
 Semantico, Floor 1, 21-23 Dyke Road, Brighton BN1 3FE
 <http://www.semantico.com/>
 <mailto:Mike.Pountney at semantico.com>
 <tel:+44-1273-722222;ext=209> <fax:+44-1273-723232>