Cfengine VS Shorewall

Cfengine Reviews

Shorewall Reviews

Cfengine mentions (5)

• German state ditches Microsoft for Linux and LibreOffice

  Your admin uses cfengine for example https://cfengine.com/. - Source: Hacker News / 25 days ago

• Replacement for Chef?

  Another oldie but goodie is cfengine: https://cfengine.com/. Source: over 1 year ago

• What does everyone use for automating setting up a new VPS?

  I'm using rudder (https://www.rudder.io/), it's based on cfengine (https://cfengine.com/). But this is more enterprise ready, you'll be fine with lightweight ansible. Nice thing is, that rudder ensures compliance by periodically executing all defined rules on all endpoints. Source: over 2 years ago

• Understanding Infrastructure as Code (IaC) in less than 10 minutes

  CFEngine Ansible Chef Puppet Saltstack. - Source: dev.to / about 3 years ago

• Immutability & loose coupling: a match made in heaven

  Automating mutable systems is often referred to as Configuration Management, and leverages tools such as Cfengine, Puppet, Chef, or Ansible. This tooling uses principles based on the concepts of target state, idempotence, and somewhat related to Mark Burgess’ Promise Theory. Configuration Management aims to make the system convergent, by running a tool on a regular basis, in order to resynchronize the system with... - Source: dev.to / about 3 years ago

Shorewall mentions (6)

• DHCP is not blocked by ufw/iptables

  All mentioned items have side-channel borked firewall and route rules in the past. Some bugs intermittently silently block local daemon instances from (re)loading like magic (some bugs only happen when the system is brought up). If your daily tasks include something less borked, than consider yourself very lucky you live without systemd. If I recall, ufw was intended for simple workstation rule sets. Personally,... - Source: Hacker News / 9 months ago

• Life After Shorewall: Replacement Options?

  I've been using Shorewall for the last decade or so on everything from custom OpenWRT firewall/gateway solutions to servers running Debian or Ubuntu. It's great software that makes managing iptables/netfilter a breeze. Alas after many years, Mr. Eastep has retired and it doesn't appear the project is maintained by a new person or team. Source: about 1 year ago

• Tunneling private networked host to the internet through public-facing server?

  Shorewall (https://shorewall.org/) can do the job easily. Source: over 1 year ago

• How to hairpin a whole network segment?

  Despite administrating Linux machines since 1994, I have never really looked closely at iptables because I was using shorewall and the briefly firehol. Source: over 1 year ago

• dog: An open source firewall management system for packs of firewalls (iptables)

  You should just use https://shorewall.org/. Source: almost 3 years ago