Public SourceMage Discussion List

["Andrew \"ruskie\" Levstik" <ruskie AT mages.ath.cx>]

Seth Alan Woolley wrote :

> PGP verify signed message
> gpg: Signature made sob 06 nov 2004 06:18:09 CET using DSA key ID EF10E21A
> gpg: Good signature from "Seth Alan Woolley (2004 personal key) 
> <seth@positivism
> .org>"
> gpg: WARNING: This key is not certified with a trusted signature!
> gpg:          There is no indication that the signature belongs to the 
> owner.
> Primary key fingerprint: 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
> PGP verification success
> 
> I approve using the "provides" logic and making it a part of our iso.  
> We could have Thomas's minimal firewall as one option, as well as 
> shorewall, agt, etc.  Not too many options lest our iso get too big, but 
> nowadays, firewalls are becoming more and more required, and any lan 
> with any possible untrusted network activity should be firewalled.
> 
> Seth
> 
> On Fri, Nov 05, 2004 at 09:35:25PM -0600, David Kowis wrote:
> > Personally, I use the shorewall spell. It'd be nice to have a
> > PROVIDES="firewall" though. 
> > 
> > -----Original Message-----
> > From: sm-discuss-bounces AT lists.ibiblio.org
> > [mailto:sm-discuss-bounces AT lists.ibiblio.org] On Behalf Of Thomas HOUSSIN
> > Sent: Friday, November 05, 2004 2:17 PM
> > To: sm-discuss
> > Subject: [SM-Discuss] firewall spell
> > 
> > Hi everbody.
> > 
> > As the sm-firewall (at least in stable grimoire) is outdated, I
> > discussed on #sourcemage about a new firewall spell. I think it would
> > be nice to have a SM firewall, that can be optionnaly enabled with
> > network for example...
> >  
> > So i rewrote my firewall on a cleaner way (some things based
> > http://www.faqs.org/docs/iptables/index.html); I also added a config
> > file to be able to configure servers in an easier way.
> > It needs further testing (especially to add other servers entries, and
> > to test eMule/gnutella), but it works on my computer...
> > 
> > Right now it only works for one computer (no NAT), with a static IP.
> > It can be adaptated to work with a dynamic IP (grab IP from ifconfig,
> > script launch with ppp ?)
> > 
> > It would be also great to have a CONFIGURE file (something like
> > netconf) to grab important parameters (IP, interface, allow servers,
> > etc) from the user. Any proposal about this ?
> > 
> > ++
> > Thomas
> > 
> > 
> > !DSPAM:418c2396216182009618313!
> > 
> > _______________________________________________
> > SM-Discuss mailing list
> > SM-Discuss AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-discuss
> > 
> 

Didn't even know we had something like that...
but anyways I use my own firewall script
with NAT and shitloads of other stuff only thing I need
to do is separate the configuration to a sysconfig/firewall file
but that's easy... I did built my firewall up to be as modular as possible...
Anyways a minimal fw script is a good idea imho.

-- 
Andrew "ruskie" Levstik

For all the knowledge...       ||   URL: http://ruskie.pixelcarnage.com
I will prevail...              ||   ICQ: 321223361
If I fail nothing is left...   ||   MSN: ruskie_0 AT yahoo.co.uk
All is lost...                 ||   Jabber: ruskie AT jabber.org
Never to be seen again...      ||   Yahoo!: ruskie_0
Nevermore...

Key ID = 32FE2034
Key fingerprint = EF36 041B E2A5 4E6F 7B3E  6B45 C0F2 E234 32FE 2034

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GAT d? s+:+++ a? C++++>$ UL+++ P L+++ E---- W+ N+ o? K? !w O+ !M
V PS+ PE Y+ PGP++ t+++ 5+++ !X R++ tv++ b+++ DI? !D G e h! !r !y+
------END GEEK CODE BLOCK------