NEW management for ports on the SG20 - should I?

[DrSterni]

First of all thanks to Anoldman for publishing this "new" method of managing the in- and outgoing ports on the SG20 (please click here).

Well, this sounds real good to me. Actually I was working all the time with this bl...y iptables-stuff. That also works, but it's a hell of a job if you're dealing with a lot of ports as I have to do.

This "new" way seems to be much easier...

What I'm quite unsure about is: should I really try this method as I already had some problems with incompatibilities between the EU- and the US-images before.

WHAT if it does not work like this? WHAT if the packages which have to be installed don't fit to the EU-Version of the image? I have to use this image, because the American images does not work on my SG20-hardware (strange, but that's it...).

Does anyone have experiences with this? AND (this mainly goes to Anoldman): is there a way of de-installing all the packages if something goes wrong?

Thanks for your support!

Dr.Sterni

[anoldman]

The only differences are language-oriented. Parts of the rpm's posted install in the /sa2/lang/en directory. If you are using eu or another language, tell me the language in your /sa2/lang directory. Since I pulled these rpm's off of the restore cd, I could send you the ones for your language.

As for an undo, I recommend a snapshot for short-term. If you want long-term assurance, get an unzip program that can look inside rpm's and look at the filenames/locations installed. Then just ftp the "originals" off your drive to a safe location!

[DrSterni]

Hey, that's what I call "fast"

The languages in my /sa/lang/ -dir are:

de (german)
en (english)
es (spanish)
fr (french)
it (italian)
nl (netherland)

When I open the "8282" admin-GUI the default language is de (german).

"Could you"?

Regarding your backup-idea: I already found this advise in your article. The problem is: I can't use the 2nd harddrive for the snapshots, as I need the space for files. My SG20 also is a fileserver in my network.

But anyway: your idea with the unzip-program is a very good one! I'll try this tomorrow (before I try to unpack the rpm's and overwrite my existing firewall ).

[anoldman]

I use Quick Zip to explore RPM's from windows. You can see file/folder structure and know which files will be replaced when you install the RPM.

There is only one language-related file here.
Sa2_deLangDeWebAdmin3000network2000firewall-3.0.0-1.i386.rpm
The others appear to be universal (backend scripts).

Let me know how it goes.

[DrSterni]

RESPECT THIS OLD MAN !

Great stuff! This works! And even in my preferred language!

I am super-happy with this solution now. All I have to do is entering all my port-rules from before, but that does not matter...

After that it will a real good help!

Thanks again.