4 ms·
How exactly is having 3 Firewalls in base system "poor defaults"? The author never explains how 3 firewalls are bad. It seems this is probably some Linux hack
by frankharv 7y ago
How exactly is having 3 Firewalls in base system "poor defaults"?
The author never explains how 3 firewalls are bad.
It seems this is probably some Linux hack trying to slander FreeBSD.
- metalliqaz 7y agoThe Zen of Python (PEP 20, aka "import this") comes to mind. "There should be one-- and preferably only one --obvious way to do it."
- ianai 7y agoTotally relevant for programming and irrelevant for a general purpose OS.
- davesmith1983 7y agoWhy? It makes perfect sense to me. For something that should be shipped by default with an OS there should be one preferred option. It not like you can't install another after installation.
- ianai 7y agoDifferent machine different uses different machines it should accept packets from and send packets to remotely.
- davesmith1983 7y agoWhat has this got to do with default OS configuration provided by the vendor (in this case FreeBSD team)?
- _jal 7y agoThat's a lovely sentiment, and a great one to base a language that has an emphasis on instruction and readability on. But unless you also wish to argue that "there should be preferably only one programming language", it also follows that there are other sentiments upon which to base languages. Here's one that seems to fit the continuing analogy: TMTOWTDI. https://en.wikipedia.org/wiki/There's_more_than_one_way_to_do_it https://en.wikipedia.org/wiki/There's_more_than_one_way_to_d... Now, you may not like that one, and that's fair. I frankly like Python less the more I use it, but it still has its place in my toolkit.
- metalliqaz 7y agoThe world has room for multiple philosophies, and that's a good thing. I happen to prefer PEP20 to TMTOWTDI, and Python to Perl, as might be expected. I wasn't trying to say that there should only be one programming language, and I don't think it follows from the statement I quoted. I take it more like this: You use the correct tool for the job, and if there are inferior tools then just get rid of them. In the context of the discussion, I happen to think that one packet filter/firewall in an OS is the correct number, unless each has significantly different uses. Such is not the case in FreeBSD.
- Fnoord 7y agoOh the irony of that statement, needing Python 2 and 3 on our systems for years.
- earenndil 7y agoWell there's one problem that immediately arises: pf is years out of date.
- Lammy 7y agoOn the plus side they avoided breaking everybody’s firewall configs by importing the “new” pf rule syntax from OpenBSD.
- jen20 7y agoMy take-away from that sentence was not that having 3 firewalls was the poor default, but that having none of them enabled by default was, instead.