Just want to say again that Vuurmuur functions marvelously.
I haven't installed rc2 yet but vuurmuur_conf functions normally with
the existing configuration of rc1.
* I have a watch service that checks audit log for manually changing
some things around ;-).
I am using (ifconfig) aliases to give my eth0 two virtual device names
because I feel that's more logically sound,
but iptables actually can't handle :0 names so I do a save and restore
while filtering out those :0 and :1 labels.
But Vuurmuur handles it fine.
* Iptrafvol can't handle longer device names (interface names) so I have
a small patch for that too.
Because of the above change I also have to manually (automatically) fix
the accounting rules though.
One of my 'interfaces' is used for input, the other for forwarding.
So I just remove the forwarding accounting rule for the one, and the
input accounting rule for the other.
Before removing the distinction.
I also add some custom masquerading rules that I think were hard to do
in Vuurmuur but I was not sure; but I wanted to have it anyway outside
of Vuurmuur as well so I think I never bothered...
Currently there is a huge barrage of "samba" break-in attempts, or at
least connection attempts that wasn't there before.
I don't use ipv6 so I can't comment on that.
Maybe I have said these things before; it is a quiet list ;-).
But I just check the list of firewall packages available for Debian.
There is seemingly nothing that provides an ncurses front-end and
although there is a Qt application called fwbuilder, and there is a
modest DBUS/applet system called firewalld,
and there is a bunch of monitoring and analysing systems geared more
towards larger installations,
with one aimed at just providing basically email reporting,
there appears to be nothing that actually combines "building" and
"monitoring".
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Vuurmuur-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/vuurmuur-users