[pve-devel] pve-firewall questions

[Alexandre DERUMIER]

>>But feel free to try with iptables directly if you think that is easier. 

Ok, I'll do test this week.

----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: "pve-devel" <pve-devel at pve.proxmox.com> 
Envoyé: Lundi 20 Janvier 2014 10:07:29 
Objet: RE: [pve-devel] pve-firewall questions 

> By the way, any reason to use shorewall instead iptables directly ? 
> 

I simply do not have the know-how. 

> I'm reading openstack and cloustack firewall code, implementation is not too 
> difficult 

My feeling is that we can avoid many problems using shorewall, because that 
code is known to be stable for more than 10 years. 

But feel free to try with iptables directly if you think that is easier.