Re: R: Firewall-1, packet -VS- Proxy

[Darren Reed <avalon @ coombs . anu . edu . au>]

In some mail from Franco RUGGIERI, sie said:
[...]
> 2) setting up the rules is a real headache, most of it defining all the
> objects that make up the network. And everything which is difficult to
> implement is error prone.
> Can anyone confirm this hearsay?

Whilst this is required, it is this which a lot find attractive.  If I can
create an artificial group of 10 hosts and represent that with one rule,
which is easier to read: one rule or 10 ?

Darren