Re: Re[2]: [Security Firewall] Florins Firewall

Vincent Danen <[email protected]> Tue, 2 Aug 2005 21:41:02 -0600
Newsgroups gmane.linux.mandrake.security.firewall
Message-ID <[email protected]>
On 2-Aug-05, at 8:18 PM, Steven Lim wrote:

> okay... So, where shall we start from ?

Start with a mailing list.  Seriously guys, I have no problem with  
you wanting to take Mandriva's hard work and invested man hours,  
wages, and research to run off and start your own copy-cat distro and  
rob Mandriva of their well-earned work... that is the spirit of open  
source and GPL'd software these days, so its entirely your right.

But, out of respect for the people that you're taking advantage of,  
could you discuss the competing product somewhere other than the  
support and discussion list for the product you plan to use without  
paying for?  I mean, really, it seems odd that this is a list to  
discuss MNF but all you want to talk about out is a) how unfair it is  
that they're not giving it away, b) how you all want free copies of  
the MNF ISOs because you lurk on a mailing list, and c) how you now  
want to check it out of CVS, strip out all reference to Mandriva, and  
use it gratis.  I don't think it's appropriate to discuss that kind  
of thing on *this* mailing list.

I've heard people offer to setup websites and subversion repositories  
and stuff, but you can start with just a plain old mailing list while  
you hatch your plot?  I'm sure it's insulting enough to Mandriva to  
hear about how you all love MNF but just don't feel like paying for  
the hard work invested, but to add injury to the insult, you're using  
Mandriva's infrastructure to discuss a fork.

Maybe this list could be used for what it was intended, and everyone  
who feels that they've earned the fruit of the labour without paying  
for the harvest can do so elsewhere.

My $0.02CAD.  I don't really care that you're doing what you're  
doing, or at least planning to, but I think a little bit of respect  
is deserved and this is pretty disrespectful.

> > Shade wrote:
>
>
>
> >> As long as the goal of what MNF is supposed to be doesn't  
> change, I'm
>
> >> all for it. I have always felt that the objective of the MNF  
> project
>
> >> was to produce an enterprise level firewall using strictly Open  
> Source
>
> >> technologies. There are literally hundreds of Open Source firewalls
>
> >> designed for small or home networks. However, once you get into  
> some
>
> >> of the more detailed rulesets and filters required to handle  
> something
>
> >> on a much larger scale, I've found that few (if any) compare to  
> MNF's
>
> >> capabilities combined with its ease of administration. I've always
>
> >> liked the fact that I could pass on basic firewall rule changes  
> to a
>
> >> junior tech with no Linux experience (but not to an MCSE, of
>
> >> course).... :)
>
>
>
> > For me, the killer features of MNF (1) have been the ability to
>
> > (relatively) easily manage multiple WAN IP addresses, and relatively
>
> > granular firewall rules. Of course, with MNF 1, I had to add the NIC
>
> > aliases manually, but everything else has worked through the web  
> interface.
>
>
>
> > MNF2 has me practically drooling over these key features:
>
>
>
> > * ability to manage NIC aliases in the web interface
>
> > * ability to create any arbitrary number of zones, including wifi  
> and dmz
>
> > * built-in OpenVPN 2.0, and built-in certificate manager (not yet
>
> > deployed, I'm still running the February beta)
>
> > * traffic shaping, to prioritize VoIP and de-prioritize BitTorrent
>
> > (haven't yet deployed a working version of this, though)
>
> > * urpmi for keeping up-to-date.
>
>
>
> > This last point suggests keeping it based on Mandriva, but there are
>
> > certainly lots of alternatives.
>
>
>
> > How about we call it "Florin's Firewall?" ;-)
>
>
>
>


-- 
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
PGP.sig (application/pgp-signature, 186 B) - not displayed