Re: Re[2]: [Security Firewall] Florins Firewall
Vincent Danen <[email protected]> Tue, 2 Aug 2005 21:41:02 -0600
| Newsgroups | gmane.linux.mandrake.security.firewall |
|---|---|
| Message-ID | <[email protected]> |
On 2-Aug-05, at 8:18 PM, Steven Lim wrote:
> okay... So, where shall we start from ?
Start with a mailing list. Seriously guys, I have no problem with
you wanting to take Mandriva's hard work and invested man hours,
wages, and research to run off and start your own copy-cat distro and
rob Mandriva of their well-earned work... that is the spirit of open
source and GPL'd software these days, so its entirely your right.
But, out of respect for the people that you're taking advantage of,
could you discuss the competing product somewhere other than the
support and discussion list for the product you plan to use without
paying for? I mean, really, it seems odd that this is a list to
discuss MNF but all you want to talk about out is a) how unfair it is
that they're not giving it away, b) how you all want free copies of
the MNF ISOs because you lurk on a mailing list, and c) how you now
want to check it out of CVS, strip out all reference to Mandriva, and
use it gratis. I don't think it's appropriate to discuss that kind
of thing on *this* mailing list.
I've heard people offer to setup websites and subversion repositories
and stuff, but you can start with just a plain old mailing list while
you hatch your plot? I'm sure it's insulting enough to Mandriva to
hear about how you all love MNF but just don't feel like paying for
the hard work invested, but to add injury to the insult, you're using
Mandriva's infrastructure to discuss a fork.
Maybe this list could be used for what it was intended, and everyone
who feels that they've earned the fruit of the labour without paying
for the harvest can do so elsewhere.
My $0.02CAD. I don't really care that you're doing what you're
doing, or at least planning to, but I think a little bit of respect
is deserved and this is pretty disrespectful.
> > Shade wrote:
>
>
>
> >> As long as the goal of what MNF is supposed to be doesn't
> change, I'm
>
> >> all for it. I have always felt that the objective of the MNF
> project
>
> >> was to produce an enterprise level firewall using strictly Open
> Source
>
> >> technologies. There are literally hundreds of Open Source firewalls
>
> >> designed for small or home networks. However, once you get into
> some
>
> >> of the more detailed rulesets and filters required to handle
> something
>
> >> on a much larger scale, I've found that few (if any) compare to
> MNF's
>
> >> capabilities combined with its ease of administration. I've always
>
> >> liked the fact that I could pass on basic firewall rule changes
> to a
>
> >> junior tech with no Linux experience (but not to an MCSE, of
>
> >> course).... :)
>
>
>
> > For me, the killer features of MNF (1) have been the ability to
>
> > (relatively) easily manage multiple WAN IP addresses, and relatively
>
> > granular firewall rules. Of course, with MNF 1, I had to add the NIC
>
> > aliases manually, but everything else has worked through the web
> interface.
>
>
>
> > MNF2 has me practically drooling over these key features:
>
>
>
> > * ability to manage NIC aliases in the web interface
>
> > * ability to create any arbitrary number of zones, including wifi
> and dmz
>
> > * built-in OpenVPN 2.0, and built-in certificate manager (not yet
>
> > deployed, I'm still running the February beta)
>
> > * traffic shaping, to prioritize VoIP and de-prioritize BitTorrent
>
> > (haven't yet deployed a working version of this, though)
>
> > * urpmi for keeping up-to-date.
>
>
>
> > This last point suggests keeping it based on Mandriva, but there are
>
> > certainly lots of alternatives.
>
>
>
> > How about we call it "Florin's Firewall?" ;-)
>
>
>
>
--
"lynx -source http://linsec.ca/vdanen.asc | gpg --import"
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C A2BC 2EBC 5E32 FEE3 0AD4}
PGP.sig
(application/pgp-signature, 186 B) - not displayed