Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] firewall script, again...

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] firewall script, again...
  • Date: Mon, 10 Jan 2005 16:23:05 -0800

On Mon, Jan 10, 2005 at 03:29:16PM -0800, Andrew wrote:
> On Tue, Jan 11, 2005 at 12:21:17AM +0100, Thomas HOUSSIN wrote:
> > Hi all,
> >
> > Here is a new version of the firewall spell I sent here a few weeks ago.
> > Includes :
> > - firewall_perso, the script itself, to be copied in
> > /usr/sbin/firewall_perso
> > - firewall_flush, to flush all rules
> > - firewall_perso.conf, the config file. It needs to be copied in /etc,
> > and edited with your settings.
> > - firewall, a script for init.d. It just run the firewall_perso script.
> > - update-ip, a script to update your config file with your new IP and
> > rerun the firewall. If you use pppd to connect, just copying this file
> > to /etc/ppp/ip-up should update your IP and launch the firewall each
> > time you reconnect. It can also be run in init script, if your IP can
> > change.
> >
> > For now, no NAT, but I'll work on that. I tried to include in the
> > config file all that I could need. If it could be integrated into
> > devel, that would allow me to have some bugs reports and new features
> > requests. (if this is possible, I can write the spell)
> >
> > About PROVIDES, it would be useful to have a PROVIDES=firewall
> > (running several iptables-based firewalls isn't a good idea)
> >
> > Last thing : IMHO SM should propose to install a firewall, for example
> > as an optional dependency of basesystem. I think this is getting more
> > and more useful nowadays...
> >
>
> Have you looked at shorewall? The only thing that really stops a vanilla
> install from using shorewall out of the box is that you need to compile
> a bunch more netfilter modules.
>
> -Andrew

Even those netfilter modules are optional, I thought, for certain
features.

Seth

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgp48ApgCtTAW.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page