Re: [NEW SOFTWARE] FIRO - Iptables optimization

[Tihomir Katic <tihomir.katic@gmail.com>]

Hi Pierre

Thank you

You are right, my mistake with .rar (please use unrar until I change
it on web server)

Makefile should have only
# g++ -o FIRO FIRO.cpp
g++ (GCC) 3.4.6
Copyright (C) 2006

which is pretty old version, I didn't try it with newer...

Br
Tihomir



2011/6/9 Pierre Chifflier <chifflier@wzdftpd.net>:
> On Thu, Jun 09, 2011 at 03:18:38PM +0200, Tihomir Katic wrote:
>> Hi
>>
>> I developed some firewall optimizer for iptables optimization.
>>
>> FIRO is parsing output of iptables-save command and removes redundant
>> rules from it. Rules in each chain and table are optimized separately.
>> Optimization procedure continues until there are no more rules to
>> remove or to modify. As a result, FIRO generates new file with new set
>> of rules for every successful optimization procedure. Also, it logs
>> all actions and changes in separated files.
>>
>> List of optimization procedures:
>>  -  Remove irrelevant rules
>>  -  Remove redundant "shadowed after" rules
>>  -  Remove redundant "shadowed before" rules
>>  -  Remove last rules with same action as chain
>>  -  Merge rules
>>  -  Remove redundant parameters from rules
>>  -  Remove redundant elements from parameters
>>  -  Reposition of "logging" rules in chain
>>
>> This is free software, 1st published version, and I would appreciate
>> every download, every test, every reported bug, suggestion, etc.
>>
>> Link to FIRO:
>> http://valeria.zesoi.fer.hr/~tkatic
>
> Hi,
>
> There are some problems with the download link:
> - as Patrick said, please do not use a rar file, tar.gz is better
> - please package it as a directory (and not unpack all files in current
>  directory)
> - please provide a build system (a Makefile)
>
> There are many build errors:
> CharField.cpp: In destructor ‘cCharField::~cCharField()’:
> CharField.cpp:37:12: error: ‘free’ was not declared in this scope
> ..
> Configuration.cpp: In member function ‘void cConfiguration::LogDebugData(int, std::string)’:
> Configuration.cpp:160:38: error: ‘fopen’ was not declared in this scope.
>
> Pierre
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html