Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] firewall script, again...

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Andrew <afrayedknot AT thefrayedknot.armory.com>
  • To: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] firewall script, again...
  • Date: Mon, 10 Jan 2005 15:29:16 -0800

On Tue, Jan 11, 2005 at 12:21:17AM +0100, Thomas HOUSSIN wrote:
> Hi all,
>
> Here is a new version of the firewall spell I sent here a few weeks ago.
> Includes :
> - firewall_perso, the script itself, to be copied in
> /usr/sbin/firewall_perso
> - firewall_flush, to flush all rules
> - firewall_perso.conf, the config file. It needs to be copied in /etc,
> and edited with your settings.
> - firewall, a script for init.d. It just run the firewall_perso script.
> - update-ip, a script to update your config file with your new IP and
> rerun the firewall. If you use pppd to connect, just copying this file
> to /etc/ppp/ip-up should update your IP and launch the firewall each
> time you reconnect. It can also be run in init script, if your IP can
> change.
>
> For now, no NAT, but I'll work on that. I tried to include in the
> config file all that I could need. If it could be integrated into
> devel, that would allow me to have some bugs reports and new features
> requests. (if this is possible, I can write the spell)
>
> About PROVIDES, it would be useful to have a PROVIDES=firewall
> (running several iptables-based firewalls isn't a good idea)
>
> Last thing : IMHO SM should propose to install a firewall, for example
> as an optional dependency of basesystem. I think this is getting more
> and more useful nowadays...
>

Have you looked at shorewall? The only thing that really stops a vanilla
install from using shorewall out of the box is that you need to compile
a bunch more netfilter modules.

-Andrew


--
__________________________________________________________________________
|Andrew D. Stitt | astitt at sourcemage.org |
|irc: afrayedknot | afrayedknot at t.armory.com |
|aim: thefrayedknot or iteratorplusplus | acedit at armory.com |
|Sorcery Team Lead | ftp://t.armory.com/ |
--------------------------------------------------------------------------

Attachment: pgpJ7ku5sG1WP.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page