[Shorewall-users] Burn Out
Fri, 26 Apr 2002 10:43:40 -0700 (PDT)
Thank you Tom for all the work you have done creating an easy to use text
based, modern firewall. The /etc/shorewall files and your excellent web
site allowed me to get a working firewall up and running quickly. The
basic simplicity of the configuration files helped me grasp the rules and
policies for the firewall without having to intimately know iptables or
ipchains. I used the examples as examples only, not as solutions, but as
guides. More examples might be better than no examples at all.
Not having a GUI was one of the most appealing aspects of Shorewall for me.
I could just dive into the example config files and the documentation and
learn about the system. I have appreciated seeing your efforts directed at
improving the base system with enhancements like the recent rate limiting
code. Keeping the core firewall up to date and feature rich is more
important to the long term life of Shorewall than all the GUI's and
pre-canned configuration files in the world.
Shorewall is a great firewall and your support and dedication have been
second to none. Your new focus gets my support. I would be glad to help
support the quick start guide and samples.
Steve Herber email@example.com work: 206-261-0307
Systems Engineer, AMCIS, UoW home: 425-454-2399
On Fri, 26 Apr 2002, Tom Eastep wrote:
> I think that the time has come for me to back off a bit from my
> involvement with Shorewall. I just don't have enough cycles (or energy) to
> keep up the pace of the last several months. As a consequence, I'm going
> to do the following:
> 1. I'm going to stop personally supporting the entry level tools (samples
> and quick start guide).
> These tools are a source of constant frustration to me because they are
> never up to date and never seem to meet people's needs. My goal for
> Shorewall was to make it usable in complex and changing environments (the
> problem space where Seawall failed so miserably and where my true
> interests lie). I think that I have succeeded, but adapting Shorewall to
> the expectations and capabilities of people who want a shrink-wrapped
> firewall that they can install in a few minutes requires motivation which
> I simply don't have.
> If someone wants to step up and support these tools, I would be grateful.
> Should there be a volunteer, I will continue to integrate the tools into
> my web and ftp sites.
> 2. I'm abandoning work on the Shorewall GUI
> Every time that I sit down to work on the GUI, I find something more
> interesting to do. I frankly don't care enough if Shorewall has a GUI to
> expend the energy to write one and it is time that I admitted that fact to
> myself. This is not to say that I don't support fully the efforts of
> folks like John Lodge who are working to provide a GUI; I'm simpley not
> going to build one myself.
> 3. I'm going to monitor the list must less closely.
> I appreciate any help all of you can give me to help pick up the slack.
> I want to make it clear that I am in no way abandoning Shorewall or my
> commitment to it. I am just going to focus my energy in those areas where
> I have interest and where I think I can make Shorewall better.
> Tom Eastep \ Shorewall - iptables made easy
> AIM: tmeastep \ http://www.shorewall.net
> ICQ: #60745924 \ firstname.lastname@example.org