Public SourceMage Discussion List

[Seth Alan Woolley <seth AT positivism.org>]

I approve using the "provides" logic and making it a part of our iso.  
We could have Thomas's minimal firewall as one option, as well as 
shorewall, agt, etc.  Not too many options lest our iso get too big, but 
nowadays, firewalls are becoming more and more required, and any lan 
with any possible untrusted network activity should be firewalled.

Seth

On Fri, Nov 05, 2004 at 09:35:25PM -0600, David Kowis wrote:
> Personally, I use the shorewall spell. It'd be nice to have a
> PROVIDES="firewall" though. 
> 
> -----Original Message-----
> From: sm-discuss-bounces AT lists.ibiblio.org
> [mailto:sm-discuss-bounces AT lists.ibiblio.org] On Behalf Of Thomas HOUSSIN
> Sent: Friday, November 05, 2004 2:17 PM
> To: sm-discuss
> Subject: [SM-Discuss] firewall spell
> 
> Hi everbody.
> 
> As the sm-firewall (at least in stable grimoire) is outdated, I
> discussed on #sourcemage about a new firewall spell. I think it would
> be nice to have a SM firewall, that can be optionnaly enabled with
> network for example...
>  
> So i rewrote my firewall on a cleaner way (some things based
> http://www.faqs.org/docs/iptables/index.html); I also added a config
> file to be able to configure servers in an easier way.
> It needs further testing (especially to add other servers entries, and
> to test eMule/gnutella), but it works on my computer...
> 
> Right now it only works for one computer (no NAT), with a static IP.
> It can be adaptated to work with a dynamic IP (grab IP from ifconfig,
> script launch with ppp ?)
> 
> It would be also great to have a CONFIGURE file (something like
> netconf) to grab important parameters (IP, interface, allow servers,
> etc) from the user. Any proposal about this ?
> 
> ++
> Thomas
> 
> 
> !DSPAM:418c2396216182009618313!
> 
> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> 

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpqQ54oIaXME.pgp
Description: PGP signature