Re: [Devil-linux-develop] Dansguardian

[Bruce S. <bw...@ar...>]

> > I also like your idea of moving the l7 stuff to the CD and sym-linking
> > it from /etc.  I don't think they need to be modified by the user... ?
> 
> The user can even set the location to something different from /etc/l7-protocols:
>    <http://l7-filter.sourceforge.net/L7-HOWTO-Netfilter#conform>

Doesn't that say you have to specify the directory on every 'iptables'
command if you use a different directory?  That sounds like a pain.  

I'd put a symlink in /etc for people who use the standard patterns,
unless the default location can be specified during the compile.

> If possible I'd suggest configuring the default protocols dir to be something 
> like /usr/lib/l7-protocols. Anyway if a user wants to use his own protocol files 
> he can specify the new directory as show on the page referenced above,

 - BS