Text 11337, 42 rader
Skriven 2008-01-18 20:46:41 av mark lewis (1:3634/12.0)
  Kommentar till text 11330 av Russell Tiedt (5:7105/1)
Ärende: a BBS for all
=====================
 RT>> What I want it for, is to run IPCOP, or similar, for my home DSL
 RT>> line, a RED,  Green, possibly an Orange and a Blue interface.

 ml> you should take a look at smoothwall, then... IPCOP is a split from
 ml> smoothwall that includes everything and the kitchen sink rather than
 ml> following a true security standard and doing only what is necessary...
 ml> smoothwall does have mods that are easy to install and i'm aware of at
 ml> least one VPN mod for the latest SW3... i won't even begin talk about
 ml> what i'm doing with the Guardian Active Response stuff ;)

 RT> Hmmm ... , thought smoothwall was a firewall script, or was that
 RT> shorewall ... 

i dunno about shorewall but smoothwall is a complete linux OS designed
specifically for firewall usage... it completely replaces whatever is on the HD
you install it on ;)

 RT> Also found Endian, tho I have yet to look at it either ... :-(( 

 ml> community.smoothwall.org

 ml> stop by and drop wkitty42 a li'l 'ello! ;)

 RT> Will drop by sometime ...

we (a friend in WA state and myself) are this || close to releasing a major
update to the Guardian Active Response mod for SW3... this update is a huge
rewrite of the previous guardian.pl script that monitors the snort alert log
and adds violating machines to the ipblock table based on certain time limits
you set... the old version simply added violators for 24 hours no matter what
priority the alert carried... the new version now allows you to select blocking
time limits per priority as well as being able to ignore certain other
violations... without the new ignoring capabilities, my binkp stuff would be
blocked as well as my automated FTP pulls of certain data files from other
systems...

this is a big rewrite and actually helps to make smoothwall very intelligent as
to what it blocks ;)

)\/(ark

 * Origin:  (1:3634/12)