Hi Steven,
Yup, I was looking back over some list mail that I hadn't had a chance to
read through and saw your post. It looks like something that Manuel has
been looking into after quite a few requests by people for this kind of
functionality. This would be hella useful especially considering m0n0wall
contains no webcache - nor should it (IMHO). I recommend that my clients
run a separate caching appliance (normally a dedicated Linux box) and that
they don't cache on their firewall. Right now, I have this box, in a number
of situations, directly between the firewall (m0n0wall) and their network
proper. This functionality would allow me to take this box out of the
direct path, and re-route all required traffic through it instead.
I can see this being used for more than web caching... I'm mainly thinking
of redirecting all outbound :25/TCP traffic to a smtp proxy that can scan
all outbound email, and only allow access to an external :25/TCP connection
from this mail proxy.
--
Regards,
Hilton Travis Phone: +61-(0)7-3343-3889
Manager, Mobile: +61 (0)419 792 394
Quark IT http://www.QuarkIT.com.au/
Quark AudioVisual http://www.QuarkAV.net/
(Brisbane, Australia)
Network Administration, SmoothWall Firewalls, NOD32 AntiVirus
Non Linear Video Editing Solutions & Digital Audio Workstations
Conference and Seminar AudioVisual Production and Recording
War doesn't determine who is right. War determines who is left.
> -----Original Message-----
> From: Steven Ball [mailto:hamster at snurkle dot net]
> Sent: Saturday, 5 June 2004 15:25
> To: Quark IT - Hilton Travis
> Cc: m0n0wall dash dev at lists dot m0n0 dot ch
> Subject: Re: [m0n0wall-dev] Patches for Bounce
>
>
> I submitted it awaiting for someone else to look it over and
> let me know if I should make any changes. Internally, I have
> a request for redirecting an entire IP address, but that
> looks far more difficult, as this patch only bounces on a
> port by port basis.
>
> If anyone that has tried it has any feedback, let me know,
> and I will attempt to add any requests. I would love to see
> this in the base monowall image, but if need be I can turn it
> into a 'module'.
>
> Thanks!
>
> Steven Ball
> Snurkle Engineering
>
> On Jun 4, 2004, at 8:50 PM, Quark IT - Hilton Travis wrote:
>
> > Hi All,
> >
> > Has there been any more movement on this enhancement/patch? If it
> > works well, then it looks to be a likely candidate for inclusion in
> > the base image
> > - as it is functionality that a lot of people are asking
> for, and all
> > it does is *enhance* the firewall's security.
> >
> > Hilton Travis
> > http://www.quarkit.com.au
> >
> >
> >> -----Original Message-----
> >> From: Steven Ball [mailto:hamster at snurkle dot net]
> >> Sent: Sunday, 23 May 2004 16:41
> >> To: Dinesh Nair
> >> Cc: m0n0wall dash dev at lists dot m0n0 dot ch
> >> Subject: Re: [m0n0wall-dev] Patches for Bounce
> >>
> >>
> >> Sure thing. The patch is at
> >> http://snurkle.net/m0n0/bounce-1.0.patch
> >> Apply it in the rootfs directory with a -p1, and you
> should be good
> >> to go (I hope, I hadn't made up multi-file patches in a
> long while :)
> >>
> >> Steven Ball
> >> Snurkle Engineering
> >>
> >>
> >> On May 23, 2004, at 12:05 AM, Dinesh Nair wrote:
> >>
> >>>
> >>> On Sat, 22 May 2004, Steven Ball wrote:
> >>>
> >>>> As per I posted earlier I would do, I have developed
> some patches
> >>>> that add support for bouncing connections. I have
> posted all the
> >>>> changed files (against the beta 1.1b8) here:
> >>>> http://snurkle.net/m0n0/ (the tarball, if extracted in
> the root of
> >>>> the rootfs, replaces all the proper files).
> >>>
> >>> could you post this as a set of patches against the 1.1b8
> >> code base ?
> >>> it
> >>> would make it easier to see the changes you've made.
> >>>
> >>> Regards, /\_/\ "All dogs go
> to heaven."
> >>> dinesh at alphaque dot com (0 0)
> http://www.alphaque.com/
> >>> +==========================----oOO--(_)--OOo----
> >>> ==========================+
> >>> | for a in past present future; do
> >>
> >>> |
> >>> | for b in clients employers associates relatives
> neighbours pets;
> >>> do |
> >>> | echo "The opinions here in no way reflect the
> opinions of my $a
> >>> $b." |
> >>> | done; done
> >>
> >>> |
> >>>
> >>
> +====================================================================
> >> +=
> >>> +=
> >>> ===+
> >>>
> >>>
> >>>
> >>
> ---------------------------------------------------------------------
> >>> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> >>> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
> >>>
> >>
> >>
> >>
> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> >> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
> >>
> >>
> >
> >
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> > For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch
>
| 