Re: Firewalls the libdnet way

2004-04-14T15:46:16 Romulo Valdez:
> I will need to design firewalls for both *BSD and Linux based
> systems and was thinking about learning how to do that using the
> firewall capabilites included in the libdnet package, so I don't
> have to be learning two different ways to basically do the same
> thing.

That's a neat idea, I hadn't thought about that aspect of it. If you
enjoy any success, I hope you'll be able to send something back to
the list.

If, however, you come up dry, I've seen another approach work well
(not, I'm sorry to say, in a context where it could be released as
open source; next time I've gotta tread this road, Yes!).

That's to define the collection of abstractions --- ideally as
high-level as possible --- you wish for your firewall config to
support, write the simplest possible high-level language description
of them, then write translators to map those descriptions to various
output targets --- ip-filter, iptables, whatever. And of couse
proxies and clever NATting tricks to make them transparent....

-Bennett

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQFAfa3WHZWg9mCTffwRAvzdAJwN7p7+WGj9T0StsXcDaSkC4L3wTQCeJx4G
/hepHCTDsV/dnChU4cq3zcY=
=AZpg
-----END PGP SIGNATURE-----