View Single Post

   
  #7 (permalink)  
Old 02-16-2008, 05:41 AM
phn@icke-reklam.ipsec.nu
 
Posts: n/a
Default Re: openbsd windows or gui based pf generator

Greg Hennessy <me@privacy.net> wrote:
> On Wed, 09 Jun 2004 15:51:20 GMT, pakrat@localhost.private.neotoma.org
> wrote:



>>1) A GUI is no replacement for clue.


> True.


>>2) If you do have a clue, the GUI will tend to get in your way.


> Not if its well designed.

You mean "Not if my demands are simple and predictable" ?


> GUI policy management also makes life a tad easier when operating in
> enterprise space. Especially when working on a global policy for dozens if
> not hundreds of edge devices.


In what way is a GUI superior to "vi" + perl + rsync + rcs/cvs in managing
policys for lot's of boxes ?

>>
>>I tossed it in favor of vi and manually making a backup copy before editing.


> Admirable as an editor is, it still doesnt fix the occasional problem
> between chair and keyboard.

Thats where CVS comes in. True, i GUI might catch (some)errors on your thinking,
but how do you back out of these without a versioning system ??


> The sort of problem we've all experienced, in particular the 'Oh F*CK'
> moment as you realise that your tired 2am self has just hacked the policy
> on the wrong firewall and are now locked out.




> greg


> --
> "vying with Platt for the largest gap
> between capability and self perception"


--
Peter Håkanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.
Reply With Quote