Re: [Leaf-devel] Vote on web logo entries

2001-01-03 Thread Charles Steinkuehler
Charles I'm sorry, but would you please chose your favorite. We can vote for an alternate later. Thanks. Argh OK, make me actually decide... I guess I have to go with Mike Noyes' logo: ftp://leaf.sourceforge.net/pub/leaf/logo/mhnoyes/tuxnet-leaflogo1.png which I think works better with

Re: [Leaf-devel] Grand New Firewall Paradigm

2001-01-03 Thread Charles Steinkuehler
Various scripts like sea-wall, Matthew Grant's scripts, and many 'click the box build a script' type programs. These solutions can be very easy to use, and configurable (to an extent), but they quickly run into problems when dealing with arbitrary situations that were not planned for

Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread Mike Noyes
x-flowedI doubt this will help the current discussion, but I think it's noteworthy. There is a new FAQ by Daniel Swan for comp.os.linux.security at: http://www.linuxsecurity.com/docs/colsfaq.html -- Mike Noyes [EMAIL PROTECTED] http://leaf.sourceforge.net/

Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread David Douthitt
On 3 Jan 2001, at 16:33, David Douthitt wrote: I'm thinking about this some... Thinking on this, the Fence idea makes all the problems we've seen: you not only have to allow one way but also the other. The Network Idea simplifies things slightly, but creates the problem in that the

Re: [Leaf-devel] Grand New Firewall Paradim

2001-01-03 Thread George Metz
On Wed, 3 Jan 2001, Charles Steinkuehler wrote: For instance, the following network: ...is a nightmarish FrankenNetwork. Hence EigerStein perhaps? I applaud you for making it work well. =) Who said it worked well? : Works well enough that they're keeping it, neh? =) I think you

Re: [Leaf-devel] Grand New Firewall Paradim

2001-01-03 Thread Jack Coates
Sounds like CheckPoint's GUI, or even more like Cisco's Network Configurator (not sure of the name, no one really uses it). I have to admit I'm pretty ambivalent about changing focus. Firewall configuration focusses on the router because it is a router. Call it a packet filter or a firewall or a

[Leaf-devel] New logos

2001-01-03 Thread Mike Noyes
x-flowedEveryone, I just uploaded two new logos based on the tuxnet image. tuxnet-leaflogo2.png - implements a suggestion from George tuxnet-leaflogo3.png - implements a suggestion from Charles Charles, I'm sorry about the hat, but I'm still unable to remember how to 3-D rotate it.

Re: [Leaf-devel] New logos

2001-01-03 Thread Eric Wolzak
Hello Everyone, I just uploaded two new logos based on the tuxnet image. tuxnet-leaflogo2.png - implements a suggestion from George tuxnet-leaflogo3.png - implements a suggestion from Charles Charles, I'm sorry about the hat, but I'm still unable to remember how to 3-D rotate it.

Re: [Leaf-devel] OO Firewall Design

2001-01-03 Thread Anh (Ly) Vuong
Sorry for butting in middle of the conversation; and please let me know if I make an ASS.. out of myself! :) Can we abstract these networking terms as follow: IS (Intermediate System), ES (End System) (OSIism here). And for each IS or ES, it provides one or more SERVICES. HTTP, FTP,

Re: [Leaf-devel] New logos

2001-01-03 Thread Mike Noyes
x-flowedAt 11:14 PM 1/3/01 +0100, [EMAIL PROTECTED] (Eric Wolzak) wrote: Hello Everyone, I just uploaded two new logos based on the tuxnet image. tuxnet-leaflogo2.png - implements a suggestion from George tuxnet-leaflogo3.png - implements a suggestion from Charles Charles, I'm

Re: [Leaf-devel] Grand New Firewall Paradigm

2001-01-03 Thread Donovan Baarda
On Wed, Jan 03, 2001 at 09:31:01AM -0600, David Douthitt wrote: On 3 Jan 2001, at 2:32, Charles Steinkuehler wrote: [...] What about things like Mason, which scan typical traffic and implement rules to match? Problem with Mason is it relies on Perl (not nice in an embedded context). Ummm,

Re: [Leaf-devel] Grand New Firewall Paradigm

2001-01-03 Thread David Douthitt
On 3 Jan 2001, at 23:38, Donovan Baarda wrote: Ummm, maybe I am out on my own, but what is wrong with having a bulky fw-builder app that runs on a full machine to generate a light-weight fw that can be loaded onto the leaf machine? What "full machine"? If I'm Mr. Home User with Windows 95,

Re: [Leaf-devel] Grand New Firewall Paradigm

2001-01-03 Thread David Douthitt
I didn't realize this till later, but perhaps we have something useful already. at least *I* do :-) I'm going to try this out and see just exactly what it does. I'm not satisified entirely with the "watch the traffic and allow it" approach to firewalling, but it may be a good quickstart,

Re: [Leaf-devel] Grand New Firewall Paradigm

2001-01-03 Thread Donovan Baarda
On Wed, Jan 03, 2001 at 05:53:52PM -0600, David Douthitt wrote: On 3 Jan 2001, at 23:38, Donovan Baarda wrote: Ummm, maybe I am out on my own, but what is wrong with having a bulky fw-builder app that runs on a full machine to generate a light-weight fw that can be loaded onto the leaf

Re: [Leaf-devel] Grand New Firewall Paradim

2001-01-03 Thread George Metz
On Wed, 3 Jan 2001, Mike Sensney wrote: Here is my attempt at restating the problem. (Steps in holding up a REALLY LARGE Stop Sign) Not picking on you Mike, but you're the first to step out into the open on this issue, and the first to do more than hint about the possibility. Are we looking

Re: [Leaf-devel] New logos

2001-01-03 Thread George Metz
On Wed, 3 Jan 2001, Mike Noyes wrote: Everyone, I just uploaded two new logos based on the tuxnet image. tuxnet-leaflogo2.png - implements a suggestion from George Change my vote to this one. Much nicer than my first attempt to Manipulate Graphics. =) I looked at Pedro's entry, and while

Re: [Leaf-devel] New logos

2001-01-03 Thread George Metz
On Wed, 3 Jan 2001, Mike Noyes wrote: BTW, since I was in Gimp anyway I created another simple logo. ftp://leaf.sourceforge.net/pub/leaf/logo/mhnoyes/cool-metal_leaf.png Once we get around to secondary logos, this one gets my vote for a banner style. Nice work, Mike. -- George Metz

Re: [Leaf-devel] Grand New Firewall Paradim

2001-01-03 Thread Charles Steinkuehler
(Steps in holding up a REALLY LARGE Stop Sign) Where were you when a took that wrong turn in Alberqueque?!? : Not picking on you Mike, but you're the first to step out into the open on this issue, and the first to do more than hint about the possibility. Are we looking at a rewrite of how

Re: [Leaf-devel] Grand New Firewall Paradim

2001-01-03 Thread Anh (Ly) Vuong
Charles Steinkuehler wrote: ... Pretty much all networking related configuration could be directly generated from an appropriate functional description of the black box, including interface setup, proxy-arp, static-NAT, QOS, and anything else that happens inside the box (I don't want to

Re: [Leaf-devel] Vote on web logo entries

2001-01-03 Thread Paul Batozech
Paul Batozech wrote: Well this is tough as all are quite good, but here goes. Web Site: Eric's Logo: For a graphic type I'd say Jack's Sorry about this Jack, but I just saw Mike's 'cool-metal_leaf.png'and I gotta change my vote! And no, I'm note just trying to suck up:) Paul