Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] firewall spell

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: "Andrew \"ruskie\" Levstik" <ruskie AT mages.ath.cx>
  • To: sm-discuss AT lists.ibiblio.org
  • Subject: Re: [SM-Discuss] firewall spell
  • Date: Sat, 6 Nov 2004 09:07:40 +0100

Seth Alan Woolley wrote :

> PGP verify signed message
> gpg: Signature made sob 06 nov 2004 06:18:09 CET using DSA key ID EF10E21A
> gpg: Good signature from "Seth Alan Woolley (2004 personal key)
> <seth@positivism
> .org>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg: There is no indication that the signature belongs to the
> owner.
> Primary key fingerprint: 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
> PGP verification success
>
> I approve using the "provides" logic and making it a part of our iso.
> We could have Thomas's minimal firewall as one option, as well as
> shorewall, agt, etc. Not too many options lest our iso get too big, but
> nowadays, firewalls are becoming more and more required, and any lan
> with any possible untrusted network activity should be firewalled.
>
> Seth
>
> On Fri, Nov 05, 2004 at 09:35:25PM -0600, David Kowis wrote:
> > Personally, I use the shorewall spell. It'd be nice to have a
> > PROVIDES="firewall" though.
> >
> > -----Original Message-----
> > From: sm-discuss-bounces AT lists.ibiblio.org
> > [mailto:sm-discuss-bounces AT lists.ibiblio.org] On Behalf Of Thomas HOUSSIN
> > Sent: Friday, November 05, 2004 2:17 PM
> > To: sm-discuss
> > Subject: [SM-Discuss] firewall spell
> >
> > Hi everbody.
> >
> > As the sm-firewall (at least in stable grimoire) is outdated, I
> > discussed on #sourcemage about a new firewall spell. I think it would
> > be nice to have a SM firewall, that can be optionnaly enabled with
> > network for example...
> >
> > So i rewrote my firewall on a cleaner way (some things based
> > http://www.faqs.org/docs/iptables/index.html); I also added a config
> > file to be able to configure servers in an easier way.
> > It needs further testing (especially to add other servers entries, and
> > to test eMule/gnutella), but it works on my computer...
> >
> > Right now it only works for one computer (no NAT), with a static IP.
> > It can be adaptated to work with a dynamic IP (grab IP from ifconfig,
> > script launch with ppp ?)
> >
> > It would be also great to have a CONFIGURE file (something like
> > netconf) to grab important parameters (IP, interface, allow servers,
> > etc) from the user. Any proposal about this ?
> >
> > ++
> > Thomas
> >
> >
> > !DSPAM:418c2396216182009618313!
> >
> > _______________________________________________
> > SM-Discuss mailing list
> > SM-Discuss AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> >
>

Didn't even know we had something like that...
but anyways I use my own firewall script
with NAT and shitloads of other stuff only thing I need
to do is separate the configuration to a sysconfig/firewall file
but that's easy... I did built my firewall up to be as modular as possible...
Anyways a minimal fw script is a good idea imho.

--
Andrew "ruskie" Levstik

For all the knowledge... || URL: http://ruskie.pixelcarnage.com
I will prevail... || ICQ: 321223361
If I fail nothing is left... || MSN: ruskie_0 AT yahoo.co.uk
All is lost... || Jabber: ruskie AT jabber.org
Never to be seen again... || Yahoo!: ruskie_0
Nevermore...

Key ID = 32FE2034
Key fingerprint = EF36 041B E2A5 4E6F 7B3E 6B45 C0F2 E234 32FE 2034

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GAT d? s+:+++ a? C++++>$ UL+++ P L+++ E---- W+ N+ o? K? !w O+ !M
V PS+ PE Y+ PGP++ t+++ 5+++ !X R++ tv++ b+++ DI? !D G e h! !r !y+
------END GEEK CODE BLOCK------




Archive powered by MHonArc 2.6.24.

Top of Page