Re: [pmfirewall] PmFirewall should be continued

Date view Thread view Subject view Author view

From: Allen Ahoffman (ahoffman@announce.com)
Date: Mon Mar 12 2001 - 13:01:52 PST


OK, after testing and straightforward editing of a file and update
program, I managed easily to do the following with rcf, and would like to
create the following with pmfireall.

I'm not biased just trying to understand differences of each tool.

I defined eth0 and eth0:2 as public interfaces and eth0:1 as private
I then limited access on the private interface to loly allow ssh from one
box to that interface.
the others I limited to no ssh or telnet and only httpd ftp and named.

I don't know how to do this with pmfirewall.

> could someone compare and contrast
pmfirewall with rcf? >
> > Geoffrey Sadler wrote:
> > >
> > > #1 Active development is still going on. Currently they are work on an ip
> > > tables replacemet for pmfirewall. So development has not stopped.
> >
> > I assume "they" means RH?
> > >
> > > #2 No way shape or form is pmfirewal able to be ported to windows. Windows
> > > lacks any kernel level security. Hence the reason it is so shoddy. Windows
> > > delegate those functions out to layers.
> >
> > I wondered why Win Firewalls don't use IPChains. Now I know.
> > >
> > > #3 Gui would be nice. But no need for it. I would sacrifice "pretty
> > > pictures" for smooth running and stable code anyday. Pmfirewall does
> > > everything it is supposd to do and more. :-)
> >
> > Alan Murrel's comment makes sense, but if you're running X-Windows
> > anyway, I don't think a GUI would do anything but make it more
> > "user-friendly". (A GUI, in the sense of creation and editing only.)
> >
> > Thanks for the reply,
> > Robert
> > ****************************************************************************
> > * To UNSUBSCRIBE from the list, send a message with "unsubscribe pmfirewall"
> > * in the message body to majordomo@pointman.org. Please direct other
> > * questions, comments, or problems to pmfirewall-owner@pointman.org.
> > *
> > * Need answers fast? Check the list archive located at:
> > * http://www.pointman.org/PMFirewall/list-archive/
> > *
> >
>
> ****************************************************************************
> * To UNSUBSCRIBE from the list, send a message with "unsubscribe pmfirewall"
> * in the message body to majordomo@pointman.org. Please direct other
> * questions, comments, or problems to pmfirewall-owner@pointman.org.
> *
> * Need answers fast? Check the list archive located at:
> * http://www.pointman.org/PMFirewall/list-archive/
> *
>

****************************************************************************
* To UNSUBSCRIBE from the list, send a message with "unsubscribe pmfirewall"
* in the message body to majordomo@pointman.org. Please direct other
* questions, comments, or problems to pmfirewall-owner@pointman.org.
*
* Need answers fast? Check the list archive located at:
* http://www.pointman.org/PMFirewall/list-archive/
*
****************************************************************************
* To UNSUBSCRIBE from the list, send a message with "unsubscribe pmfirewall"
* in the message body to majordomo@pointman.org. Please direct other
* questions, comments, or problems to pmfirewall-owner@pointman.org.
*
* Need answers fast? Check the list archive located at:
* http://www.pointman.org/PMFirewall/list-archive/
*


Date view Thread view Subject view Author view

This archive was generated by hypermail 2b29 : Sun Jun 10 2001 - 02:40:34 PDT