[Announce] PacketFlow firewall generator
Tue, 26 Nov 2002 18:03:11 -0600
These should be on the ANNOUNCE mailing list and not the user mailing list.
Shouldnt they be????
> I would like to announce the initial public release of a new tool
> called PacketFlow. It is a free command line XML based iptables
> firewall generator. I would like to invite you to download and
> evaluate it.
> The basic concept of PacketFlow is that of "security levels."* Every
> interface has a security level, and it indicates how much the
> interface is trusted. By default connections may made from a high
> security interface to a low security interface. By default,
> connections may not be made from a low security interface to a high
> security interface. Both may be overridden with access lists.
> Several examples are included in the download. These include dial-up,
> broadband, single DMZ, and multiple DMZ examples. These should
> illustrate the basics of the configuration file. There are a few
> features that are not yet shown in the samples, but hopefully they
> will be shown soon.
> PacketFlow is currently able to generate complete rule sets. Current
> development is focusing on better configuration validation and sanity
> checking. That said, the rule sets generated from a valid
> configuration file do work well. You are strongly encouraged to read
> through the generated rules for yourself.
> PacketFlow currently does not support generating NAT rules, but I hope
> to add that in the future. Any recommendations on a syntax for NAT
> rules would be appreciated.
> I would appreciate any feedback that you could provide. There is a
> FAQ on the home page listed below, and the source may be downloaded
> from the project page. Please submit any bugs that you find to the
> bug tracking system on the SourceForge site.
> Paul Frieden
> Home page: http://packetflowfw.sourceforge.net
> Project page: http://sourceforge.net/projects/packetflowfw/
> * This is very similar to the security-levels used by the PIX firewall
Chris Baker -- technical specialist
Big Brothers Big Sisters of Central Ohio