Hi Hisao,
You may wish to look at the firewall package that's at
http://bluequartz.ixc.co.uk/ I wrote this a while back and had some good
feedback from people on the list. The Gui is simple and allows blacklist and
port restrictions to be loaded into iptables. It just needs wrapping up as a
package, I believe it will suit a lot of users who are using the host
edition and with a bit of work those who are looking at workgroup uses.
Thanks
Leigh
-----Original Message-----
From: Hisao SHIBUYA [mailto:shibuya (at mark) alpha.or.jp]
Sent: 05 May 2006 16:43
To: coba-e (at mark) bluequartz.org
Subject: [coba-e:05059] Re: Basic firewall package
This package offers a GUI same as Qube3's one.
And it doesn't pick up the rules which is already wrote.
The update initscript for iptables load the rules from
/etc/sysconfig/iptables and /etc/iptables.conf. Then,
if you write your own rules in /etc/sysconfig/iptables,
I think that it will not be conflicted with GUI's rules.
Hisao
On 2006/05/06, at 0:29, Stephane xj. Lucas wrote:
> Hi Hisao,
>
> Does that package offer a GUI? And will it pick up the rules already
> installed on the server?
>
> Regards
> Stephane
>
> -----Original Message-----
> From: Hisao SHIBUYA [mailto:shibuya (at mark) alpha.or.jp]
> Sent: 05 May 2006 15:42
> To: coba-e (at mark) bluequartz.org
> Subject: [coba-e:05055] Basic firewall package
>
> Hi blues,
>
> I ported base-firewall package from Qube3 codes.
> These packages are for CentOS4,
> base-firewall-capstone-1.0.1-23BQ1.centos4.noarch.rpm
> base-firewall-glue-1.0.1-23BQ1.centos4.noarch.rpm
> base-firewall-locale-en-1.0.1-23BQ1.centos4.noarch.rpm
> base-firewall-locale-ja-1.0.1-23BQ1.centos4.noarch.rpm
> base-firewall-ui-1.0.1-23BQ1.centos4.noarch.rpm
> I put these packages for all distributions in testing repository.
> And these packages needs latest base-bluquartz packages, it will be
> replace init script for iptables.
>
> Please restart cced and admserv with the command after installing.
> # /etc/init.d/cced.init restart
> # /etc/init.d/admserv restart
>
> By default, the firewall function is disabled.
>
> Please let me know, if you have any problems.
>
> Enjoy,
> Hisao
>
>
>