Re: Create a canned 'Firewall Build' or RFHH

[Theo de Raadt <deraadt@cvs.openbsd.org>]

> But, if any of you would  rather trade insults and feel superior because 
> you are an OpenBSD guru, or becoming one.  Feel free to insult me, who 
> is not.  yet...  I'm going to try to fix an identifed problem. I'll 
> share with those who will share and help address the problem, and not 
> share with those who don't.  

Yes, there are some losers (and I say, non-developers) on our mailing
who are posturing quite a bit.

> I decided to go with OpenBSD because of it's reputation for keeping 
> security in mind. So far, I've seen the OpenBSD community would rather 
> keep to themselves and require everyone to have to be an expert in 
> OpenBSD to use it, then share their knowledge to create tools for those 
> who know less but have just as strong a need for security.  If that is 
> the case, I'll find a different place to solve this problem...

I agree with you, but you have made a mistake.

We provide more network security tools than any other vendor.
We document them very well on the system.

The internet is complicated.
Firewalling is not easy.

Noone out there provides more than us.

So you should stop flaming us.  There are largely unsolved problems in
making filtering easier.  Turnkey you are not going to find.  Noone
has turnkey, and anyone who is selling you turnkey is selling you
a hole.

To be honest, your mistake is even more basic.  You've forgotten who
you are talking to.  We develop what we need, for fun, in our own
time.  If you are not a person who matches our needs, of course you
are going to be dissapointed.  Your assumption is that we do this for
people like you.  Why?  Are you yourself really that altruistic?  I'm
pretty busy working on code... and various distraction drag me away
all the time... I was looking for someone to mow my lawn during the
summer... so I could write more code.  Are you my man, Mr. Lawnmower
Man?  Sorry, but noone is as altruistic as you believe them to be.
Hah.  If you think they are, I think you are going to be for quite a
long search, or worse, you may discover that even vendors will not
give you this for dollars.