Re: (fwd) Re: what comes after firehol?

Mike Pountney <[email protected]>
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>
I'm happy to help in any way to keep Firehol alive, I use it extensively, and love how simple it makes our IPtables setup.

It would be great to get a version up on Github or similar. 


On 13 Mar 2012, at 13:56, Paul Fox wrote:

> phil -- count me in.  firehol is a nice piece of work, and
> i'm happy to help.
> 
> just to remind folks -- costa did send a message to this list last
> june (below).  i assume phil has tried to contact him at the address
> he used then, and i've cc'ed him again now, just in case.  but clearly
> costa no longer has the time to devote to firehol.
> 
> it would clearly be preferable for phil to be able to take over
> maintenance of firehol directly if costa were willing, but if we can't
> even get in touch, then a fork is the next best thing.
> 
> paul
> 
> costa wrote:
>> Date:    Wed, 29 Jun 2011 12:33:48 +0300
>> To:      Phil Whineray <[email protected]>
>> cc:      [email protected]
>> From:    Costa Tsaousis <[email protected]>
>> Subject: Re: [Firehol-support] what comes after firehol?
>> 
>> Hi all,
>> 
>> I am very pleased by your comments. Thank you very much.
>> 
>> As you have noticed it has been 3 years since the last release of
>> firehol. Although I have done enough commits fixing various bugs and
>> extending firehol, I did not manage to release anything. There are two
>> reasons for this:
>> 
>> a. Every new release needs an effort in documentation. I tried to
>> prepare a release once or twice during these 3 years, but I was unable
>> to complete the task.
>> 
>> b. Every new release attracts new users, demanding support, which
>> unfortunately I cannot provide to the extend required.
>> 
>> 
>> Currently firehol has 3 major issues:
>> 
>> 1. There is no ipv6 support
>> 
>> 2. It is very slow on very big firewalls (I have one with 10.000 rules,
>> that needs around 3 mins to get activated). There is a patch supplied at
>> sourceforge. It requires however extended testing.
>> 
>> 3. It should not depend on BASH. ASH is faster, lighter, runs on
>> embedded systems and could be used by firehol. ASH however lacks arrays,
>> a key feature for firehol. To run under ASH, firehol would need a
>> re-write of its core. Again, this would require extended testing.
>> 
>> Unfortunately, I cannot do all the work by myself.
>> 
>> If you would like to help, please send me a note. Firehol needs help to
>> stay alive.
>> 
>> In the mean time, I keep the cvs version of firehol always stable. I
>> suggest to use the cvs version instead of the released one. I always
>> update the CVS log properly too, so you can review what has changed or
>> fixed. I also fix bugs as soon as I get notified about them or add minor
>> features that do not require a major rewrite. These are the minimum
>> required to have a well maintained and secure firewall (firehol is
>> always well maintained - it is not "well released" though).
>> 
>> Regards,
>> 
>> Costa
>> 
>> 
>> 
>> 
>> part 2     text/plain                 377
>> ------------------------------------------------------------------------------
>> All of the data generated in your IT infrastructure is seriously valuable.
>> Why? It contains a definitive record of application performance, security 
>> threats, fraudulent activity, and more. Splunk takes this data and makes 
>> sense of it. IT sense. And common sense.
>> http://p.sf.net/sfu/splunk-d2d-c2part 3     text/plain                 176
>> _______________________________________________
>> Firehol-support mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/firehol-support
> 
> =---------------------
> paul fox, [email protected] (arlington, ma, where it's 48.2 degrees)
> 
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> Firehol-support mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/firehol-support


------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.