Re: [NEW SOFTWARE] FIRO - Iptables optimization

[Pierre Chifflier <chifflier@wzdftpd.net>]

On Thu, Jun 09, 2011 at 03:18:38PM +0200, Tihomir Katic wrote:
> Hi
> 
> I developed some firewall optimizer for iptables optimization.
> 
> FIRO is parsing output of iptables-save command and removes redundant
> rules from it. Rules in each chain and table are optimized separately.
> Optimization procedure continues until there are no more rules to
> remove or to modify. As a result, FIRO generates new file with new set
> of rules for every successful optimization procedure. Also, it logs
> all actions and changes in separated files.
> 
> List of optimization procedures:
>  -  Remove irrelevant rules
>  -  Remove redundant "shadowed after" rules
>  -  Remove redundant "shadowed before" rules
>  -  Remove last rules with same action as chain
>  -  Merge rules
>  -  Remove redundant parameters from rules
>  -  Remove redundant elements from parameters
>  -  Reposition of "logging" rules in chain
> 
> This is free software, 1st published version, and I would appreciate
> every download, every test, every reported bug, suggestion, etc.
> 
> Link to FIRO:
> http://valeria.zesoi.fer.hr/~tkatic

Hi,

There are some problems with the download link:
- as Patrick said, please do not use a rar file, tar.gz is better
- please package it as a directory (and not unpack all files in current
  directory)
- please provide a build system (a Makefile)

There are many build errors:
CharField.cpp: In destructor ‘cCharField::~cCharField()’:
CharField.cpp:37:12: error: ‘free’ was not declared in this scope
..
Configuration.cpp: In member function ‘void cConfiguration::LogDebugData(int, std::string)’:
Configuration.cpp:160:38: error: ‘fopen’ was not declared in this scope.

Pierre
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html