[Firehol-support] what comes after firehol?

[Paul Fox]

so, i really like firehol:  both the philosophy behind it and the
implementation, which seems to work pretty well.

i've used it to protect individual hosts for years, and recently made
some changes to let it create the firewall script for my openwrt
router, without needing to actually run on the openwrt box.

but i also like my firewall maintenance tools to be currently
maintained.  :-/ :-)  that doesn't seem to be happening -- the last
release was almost three years ago.

are there any other tools similar to firehol i should be aware of?

i've used fwbuilder in the past, and while it works well, and is
clearly supported, i always feel like it's way more sophisticated than
i need, and i usually forget how to use its UI in between usages.

my requirements aren't too special, though i do need support for
multiple interfaces -- i have different filtering rules for traffic
going between wan <-> lan, wan <-> wlan, and lan <-> wlan.  and i'm
starting to think about ipv6, but have no concrete need for that yet.

is firehol still the right answer for simple firewall creation?

paul
=---------------------
 paul fox, pgf at foxharp.boston.ma.us (arlington, ma, where it's 49.1 degrees)