Re: comp34.tgz necessary on a firewall?

[Richard Welty <rwelty@averillpark.net>]

On Sat, 1 Nov 2003 17:40:06 +0100 e.conti@gmx.net wrote:

> Do I really need to install the comp34.tgz package on my firewall to keep it 
> up-to-date? Aren't patches available in a package/binary form?
> How do you guys cope with this problem? Do you apply patches on another 
> computer and transfer the binary files to the target computers later?

i usually have some system behind the firewall, generally a faster system
with disk to spare, and use it to build releases. see "man release" for that
procedure.

then, you transfer the updated .tgz files you need and unpack them,
except for etcXX.tgz. if you see that there are changes in /etc to be
made, the thing to do is unpack etcXX.tgz in /tmp or some other place,
and merge the changes.

richard
-- 
Richard Welty                                         rwelty@averillpark.net
Averill Park Networking                                         518-573-7592
    Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security