Re: CentOS 7 - Firewall always allows outgoing packets?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Aug 9, 2014, at 10:45 AM, Valeri Galtsev <galtsev@xxxxxxxxxxxxxxxxx> wrote:
> Systemd, firewalld... Linux from what formerly was "UNIX-like" becomes "MS
> Windows-like". This is what you will hear from everybody fleeing Linux (I
> for one started gradually moving servers to FreeBSD a while back).

While the lack of outbound rules is a rather big missing feature, I don't consider 'firewalld' a step back.  Just like systemd, firewalld lets you break up rules into small chunks, scoped to a particular service or zone, which makes it easier to include a firewall rule in your RPM package or Configuration Management-managed service.  Right now, I jump through a bunch of hoops in my CM environment to manage a monolithic /etc/sysconfig/iptables file on our 6.5-based servers and workstations, and I'm looking forward to using firewalld in 7.x.

I really don't see how this is *more* like Windows behavior.  To me, it feels like a step in the right direction.  And it's not like CentOS7 disables the ability to use iptables, or makes it incredibly difficult to switch.


--
Jonathan Billings <billings@xxxxxxxxxx>


Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux