Shorewall vs. Arno

perry · 12-20-2003, 08:47 AM

using Mandrake, it comes with Shorewall. seems to work seemlessly enough.

when i installed Slackware, i had to go and manually put in Arno. that takes a little longer to setup but boy does it ever look slick!

so i'm wondering, what are the major differences between the two and should i take out Shorewall and put in Arno ?
(or is it a bad idea to have them both running)

thanks

- perry

how to arno

cyph3r7 · 12-24-2003, 10:18 AM

Both are iptables based scripts. Shorewall creates a custom script based on what you define, Arno looks like a vanilla "block all" script. Depending on what you want to do either is probably fine for your home PC. As for running both, one is probably over writting the other.

If you want straight "block all" inbound and Arno works for you then great, if you want to customize and open a port or two for games, of an http server, then stick with Shorewall.