From mboxrd@z Thu Jan 1 00:00:00 1970 From: cbaker@bbbscentralohio.org Subject: Re: [Announce] PacketFlow firewall generator Date: Tue, 26 Nov 2002 17:07:59 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3DE3AA6F.28057.1689A35@localhost> References: <3DE2FF32.7030308@users.sourceforge.net> Reply-To: cbaker@bbbscolumbus.org Mime-Version: 1.0 Content-Transfer-Encoding: 7BIT Return-path: In-reply-to: <3DE2FF32.7030308@users.sourceforge.net> Content-description: Mail message body Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org It sounds good. What else do I need to have installed for this to work? What type of dependencies will it have? > > I would like to announce the initial public release of a new tool > called PacketFlow. It is a free command line XML based iptables > firewall generator. I would like to invite you to download and > evaluate it. > > The basic concept of PacketFlow is that of "security levels."* Every > interface has a security level, and it indicates how much the > interface is trusted. By default connections may made from a high > security interface to a low security interface. By default, > connections may not be made from a low security interface to a high > security interface. Both may be overridden with access lists. > > Several examples are included in the download. These include dial-up, > broadband, single DMZ, and multiple DMZ examples. These should > illustrate the basics of the configuration file. There are a few > features that are not yet shown in the samples, but hopefully they > will be shown soon. > > PacketFlow is currently able to generate complete rule sets. Current > development is focusing on better configuration validation and sanity > checking. That said, the rule sets generated from a valid > configuration file do work well. You are strongly encouraged to read > through the generated rules for yourself. > > PacketFlow currently does not support generating NAT rules, but I hope > to add that in the future. Any recommendations on a syntax for NAT > rules would be appreciated. > > I would appreciate any feedback that you could provide. There is a > FAQ on the home page listed below, and the source may be downloaded > from the project page. Please submit any bugs that you find to the > bug tracking system on the SourceForge site. > > Sincerely, > > Paul Frieden > > Home page: http://packetflowfw.sourceforge.net > Project page: http://sourceforge.net/projects/packetflowfw/ > > > * This is very similar to the security-levels used by the PIX firewall > > > Chris Baker -- technical specialist 614-839-2447x108 cbaker@bbbscolumbus.org Big Brothers Big Sisters of Central Ohio www.bbbscolumbus.org