Re: [Cooker-firewall] Rules configuration

2001-03-16 Thread Renaud Chaillat

On Friday 16 March 2001 01:08, you wrote:
 Is there any GUI way of adding a rule in cookfire to allow internal users
 to connect via IPSec through thw firewall.  I have to allow UDP 500 and UDP
 1 (easily done), but I didnt see anyplace in the web admin tool to
 allow IP protocol 50.

 Is this documented anywhere?

There's no way to do this with our GUI tool now, unfortunately.
We may handle this in the future.

You can take a look at /etc/bastille-firewall.conf (or preferably at 
the template /usr/share/naat/templates/etc/bastille-firewall.conf which is 
applied when you configure the rules with the GUI) and 
/etc/init.d/bastille-firewall, to let protocol 50 through.

Regards,
Renaud




[Cooker-firewall] Documentation available.

2001-03-16 Thread philippe Libat

hi,,

you can find a complete documentation of the product on our site.

http://linux-mandrake.com/docs/firewall/html/

a lot of information on security concepts!

good reading!


-- 
Philippe Libat [EMAIL PROTECTED]
Linux-Mandrake  http://www.linux-mandrake.com
_
Think Different, Think Linux




RE: [Cooker-firewall] snort?

2001-03-16 Thread Gene Moreau

cool, thanks.

-Original Message-
From: philippe Libat [mailto:[EMAIL PROTECTED]]
Sent: March 16, 2001 4:02 AM
To: [EMAIL PROTECTED]
Cc: Cooker-Firewall (E-mail)
Subject: Re: [Cooker-firewall] snort?


"R.I.P. Deaddog" a crit :
 
 1. rpm -e --nodeps snort
   
 2. install your MySQL
 3. recompile snort source rpm to use newest mysql
 4. install the generated snort binary rpm
 
 Abel Cheung
 
 On Thu, 15 Mar 2001, Gene Moreau wrote:
 
  What ever version shipped with Beta 4.  I think Snort is 1.7.1mdk-i386
 
  It looked like a MySQL related problem, so I installed that from the
  cookfire beta 4 cd 3.23.31-1 RPM's directory and it put
libmysqlclient.so.10
  instead on 9.
 
  looks like the Snort RPM was installed to start with.  I removed it for
some
  reason or other, but now it won't reinstall due to the same problem.
 
  what gives?  do I need to go back to an older version of MySQL?


it'a mistake in our spec files.

if you want snort to work with new update of MySQL.
you can make :
[root@fire]# ln -s /usr/lib/libmysqlclient.so.10
/usr/lib/libmysqlclient.so.9
[root@fire]# ldconfig

it should work!

-- 
Philippe Libat [EMAIL PROTECTED]
Linux-Mandrake  http://www.linux-mandrake.com
_
Think Different, Think Linux