On Wednesday 12 February 2003 03:16 pm, Mike Noyes wrote: > Everyone, > I just placed Babel Fish sp->en translations of the Lince pages on our > website. Please help me fix the mangled translation. Thanks.
Proposed English translation to: http://leaf.sourceforge.net/mod.php?mod=userpage&menu=909&page_id=35 With the appearance of the 2.4 kernel, Linux can now give the same functionality that firewall the more advanced commercial products. Logically, different projects within the Open Source community arise to take advantage of these possibilities, but generally they are oriented to only facilitate the configuration of the main tool, IPTABLES, in a simple form. Our intention is to go a step further and develop or integrate a complete solution that is able to give the services of professional commercial products like Cisco. Although it is feasible to integrate some of the functionalities noted here in a conventional equipment, we think that computer science security requires specific equipment destined to assure it. Therefore, the first premise is one to develop a distribution that not only creates a firewall and some associated functions, but not one that integrates services such as a web server or a mailserver that only increases the vulnerability of the system. Some solutions are used on a 3 1/2" floppy disk, the most famous of these is the Linux Router Project. These solutions work very well when the desire is to reuse a simple form and old hardware, but in general they are not up to date for modern hardware and may not integrate well in a modern system. Another possibility would be to use a hard drive for the firewall. In general this is a simple solution to implement, but if the firewall well is designed it wastes the majority of the available storage on the hard drive. Additionally, it adds a mechanical element to the system, which results in lower reliability. The two options that remain are: the Compact Flash and a Disk-On-Module (DOM). Compact Flash disks are now affordable due to the proliferation of digital cameras that use them and will be the preferred option for this project. DOM's are more expensive, but very trustworthy, and take advantage of all the available benefits because they behave like a hard drive.. Because we have based our efforts on the Compact Flash does not mean that it is not possible to install this solution in a hard disk or a DOM, that depends entirely on the affordability and the circumstances of each user. Unfortunately, this distribution is too large to use on a 3 1/2" floppy disk. A similar project, based on linux with a 2.4 kernel and oriented to the Compact Flash, called Wolverine already exists (old Embedded Coyote Linux). The problem is that it is not easy to become familiar with and too much of it uses propietary code. In fact, ENEO Technology was considering use of Wolverine for a recent project, until Wolverine's author decided to not to make the source code available without buying a CD. Aside from the difficulties that this decision implies and tainted by the path that Coyote has taken in the past, it was decided that this project did not follow the essence of Free development. Another project which we considered similar to LINCE is Bering, a LEAF branch (Linux Embedded Appliance Firewall). It is also based on Linux with a 2.4 kernel, however too much of it is oriented towards use on a 3 1/2" floppy disk and is too limited for our choice in design. Since the project is very active, has an open spirit, and proven quality, we think that the best option for us to maintain is to stay as close as possible to the project that is most viable. In my opinion, the best choice would be to extend Bering to the Compact Flash, but still maintain the most common code possible. This would enormously facilitate our updates to the system and give us access to all of Bering's betatester base. In fact, we are going to propose the integration of LINCE within LEAF to Bering's main developer, Jacques Nilo. ################################################ Proposed English translation to: http://leaf.sourceforge.net/mod.php?mod=userpage&menu=90900&page_id=46 Details Objectives To be based on the Linux 2.4 kernel. To use Shorewall for the firewall configuration. To be used on a 16MB Compact Flash disk. To take advantage of the characteristics of netfilter/iptables. To use the most recent versions of the kernel that are compatible with the rest of applications. To maintain all of the basic system in a maximum of 10MB, leaving 6MB for the particular adaptations of each user. To be simple to use and to install, but considering that is embedidos systems. To use the most standard kernel possible to facilitate future development. To maintain the directory structure of Debian as much as possible. To maintain the greatest use of Bering's available packages, to assure fast updates and compatibility. To maintain updated documentation and provide specific installation documents. To give support for advanced configurations, such as DMZ, IPSec VPN, and QoS. Hardware The hardware requirements will be very minimal in general. Any equipment with a 486 processor and 32MB of ram will be able to provide service to a reasonable number of users. Service consistant with Bering exist when using a P 133 with 32 MB of ram, providing firewall services to over 100 machines. The use of intensive CPU applications, such as IPSec, increases the minimum CPU and RAM requirements. ####################################################### -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net ------------------------------------------------------- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en _______________________________________________ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
