<div dir="ltr">I agree with Shawn. Generally using PFSense or IPFire on my edge(I switch between the two depending on how irritated they make me) and for hosts I use salt to manage the firewalls. It has a nice module built in <a href="https://docs.saltstack.com/en/latest/ref/states/all/salt.states.iptables.html">https://docs.saltstack.com/en/latest/ref/states/all/salt.states.iptables.html</a> that makes building and deploying rules a snap. One thing I do like about firewalld is that the rules are written in xml, makes it pretty easy to parse and redeploy.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 28, 2016 at 2:04 AM, Shawn T Perry <span dir="ltr"><<a href="mailto:shawn@redmop.com" target="_blank">shawn@redmop.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I use PFSense as/at the router, and fwbuilder to generate scripts for<br>
local machines. On larger deployments, I use chef/puppet to handle things.<br>
<div class="HOEnZb"><div class="h5"><br>
On 3/27/2016 1:02 PM, David L. Anselmi wrote:<br>
> What do you use to manage your firewalls? (By which I mean any networking rules on any of your<br>
> (Linux) machines.)<br>
><br>
> I've been doing my firewalling in my network devices rather than hosts but I guess it's time to join<br>
> the 21st century where everything has a firewall.<br>
><br>
> So I'm looking for something that makes simple things easy. Making complicated things possible would<br>
> be nice too.<br>
><br>
> On one machine I'm using firewalld because that's what was there. Not sure that I like it.<br>
><br>
> So if you have a favorite, what is it?<br>
><br>
> Dave<br>
> _______________________________________________<br>
> clue mailing list: <a href="mailto:clue@cluedenver.org">clue@cluedenver.org</a><br>
> For information, account preferences, or to unsubscribe see:<br>
> <a href="http://cluedenver.org/mailman/listinfo/clue" rel="noreferrer" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br>
<br>
_______________________________________________<br>
clue mailing list: <a href="mailto:clue@cluedenver.org">clue@cluedenver.org</a><br>
For information, account preferences, or to unsubscribe see:<br>
<a href="http://cluedenver.org/mailman/listinfo/clue" rel="noreferrer" target="_blank">http://cluedenver.org/mailman/listinfo/clue</a><br>
</div></div></blockquote></div><br></div>