Re: Fwd: Linux support in IPFilter

Steve Clark <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <[email protected]>
Ross Cameron wrote:
> On Mon, Jun 16, 2008 at 5:49 AM, Darren Reed <[email protected] 
> <mailto:[email protected]>> wrote:
> 
> 
>         How best can I assist the IPFilter team to ensure that you're
>         rather exceptional firewall code is easier to compile for
>         whatever the latest stable version of the Linux kernel is on
>         kernel.org <http://kernel.org> <http://kernel.org>? (I always
>         work from pristine source and avoid custom patching at all cost.)
> 
> 
>     Hmm, so you want to use the Linux kernel from kernel.org
>     <http://kernel.org> withut patching?
> 
>     That might be an achievable goal...
> 
>     The problem I usually have is that the kernels bundled up by SuSE,
>     RedHat,
>     etc, etc, can be quite a pain in the a** to build from source code
>     and that
>     ability is needed to compile a kernel module.
> 
> 
> Agreed the custom patched kernel's from SUSE/Novell, RedHat/Fedora, et 
> al are generally a pain in my rump.
> 
> My thought pattern being that if we make an effort to support the 
> upstream vanilla code from Linus then its more likely that we'd get 
> people that will put in the time to write the patches needed to work on 
> the various binary distro's.
>     After all they all generally start out with the vanilla release from 
> Linus and patch it to wherever it is they want the code to be.
> 
> Reason being is after spending far too many years working on different 
> embedded projects the one thing thats ALWAYS a thorn in my side is the 
> firewalling code is almost always different from project to project.
>     I'd LOVE to be able to start standardizing!
> 
> How can I assist in achieving this aim?
>     I'd be more than happy to do all the testing whenever Linus and 
> friends release a new stable version of 2.6.x (kinda needed any way by 
> my project(s) ).
>     And depending on how severe the breakage is I might be able to fix 
> it (not the world's best kernel hacker - but willing to give it a bash 
> while I'm learning ).
> 
Hi Ross,

Have you been able to make any progress on this effort? I am greatly interested
since we are using FreeBSD for a firewall and would like to move our code to Linux
without having to change our firewall rules configuration generator.

Regards,
Steve
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.