Re: acme-firewall

On 2012-01-20T00:13:37+0100, Arturo Borrero Gonzalez <[email protected]> wrote:
> I've been working on a debian package with a basic iptables-based
> firewall system.
> 
> 
> I read some info regarding debian and firewalling here:
> 
> http://wiki.debian.org/DebianFirewall
> http://wiki.debian.org/Firewalls
> http://wiki.debian.org/iptables
> 
[...]
> I see this basic approach a nice way to include a firewall as a
> service in the system. No one of the packages listed in the debian
> wiki seems to only deploy a structure where the system admin can build
> his own firewall. This package just try to do that.

The iptables-persistent package is missing from those wiki pages. I
haven't tried it, but it may be worth looking at.

Maybe you could just install iptables-persistent and distribute the
iptables rules that you want, using puppet for example (of course, if
you're using puppet you would automate the installation of the package
too). Or, you could build your own local version of the package with
the default configuration you want.

-- 
Kenyon Ralph

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=f7Ww
-----END PGP SIGNATURE-----