What are the advantages of using Shorewall-perl?
• The Shorewall-perl compiler is much faster than the Shorewall-shell compiler. • The script generated by the Shorewall-perl compiler uses iptables-restore to instantiate the Netfilter configuration. So it runs much faster than the script generated by the Shorewall-shell compiler and doesn’t disable new connections during rule set installation. • The Shorewall-perl compiler does more thorough checking of the configuration than the Shorewall-shell compiler does. • The error messages produced by the Shorewall-perl compiler are better, more consistent and always include the file name and line number where the error was detected. • Going forward, the Shorewall-perl compiler will get all enhancements; the Shorewall-shell compiler will only get those enhancements that are easy to retrofit.
