[ previous ] [ next ] [ threads ]
 From:  "Imran K" <gururug at gmail dot com>
 To:  "Ulrik Lunddahl (PROconsult)" <ul at proconsult dot dk>
 Cc:  m0n0wall dash dev at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall-dev] Remote Administration and Webservices
 Date:  Sat, 29 Mar 2008 23:24:26 +1100
Desire is not the most critical ingredient for output......

Need, coupled with motivation and knowledge are the creators of innovation
and results.

Get together........locate some deployments so you can channel your desires
to match their needs.

Without demand or collaboration, nothing will happen....

-My two cents.....

leverage the existing web gui's ( mimic it on your management server )

-Make a new page where you "add" a list of your "managed devices"
-Push changes via an rsync / sedbot
-Still need a "management" meta data store / db of what the remote devices
are up to (configs)

Make a change in your management gui > select the devices you want to push
the setting out to > let your sync bot do the work

All this can be done on any flavour without need to ad 1 bit of code to the
base distro's.

If your thinking of broadcast, I would suggest multicast instead....but this
model would involve slave modification / code / listener

Good luck!!!

On Sat, Mar 29, 2008 at 3:37 AM, Ulrik Lunddahl (PROconsult) <
ul at proconsult dot dk> wrote:

> I'm a .NET programmer too, C#, Windows apps mostly.
> I have used m0n0wall since 2005 where I migrated our own network from
> Cisco PIX to m0n0wall, it's much more stable and the simple but yet powerful
> configuration (compared to Cisco PIX) alone, have boosted our security a
> lot.
> With m0n0wall being based on FreeBSD there is no questions asked about
> security from the management, cost is not an issue because hardware is
> cheap, and the mailing list is almost equal to free premium support.
> All we need to have a real "enterprise class" product is central
> management, and this is the only argument I have ever heard for not using
> m0n0wall where it fits.
> So I would like to contribute to this .NET management application if
> someone starts up a project.
> Best regards
> Ulrik Lunddahl
> Sales Manager - Salgschef
> PROconsult Data A/S - Rugårdsvej 15 - 5000  Odense C
> Tel: +45 63113333 - Tel dir: +45 63113341 - Mobil: +45 26363341 - Fax: +45
> 63113344
> E-mail: ul at proconsult dot dk - Web site: www.proconsult.dk
> -----Oprindelig meddelelse-----
> Fra: daniele_dll [mailto:d dot albano at gmail dot com]
> Sendt: 28. marts 2008 17:23
> Til: m0n0wall dash dev at lists dot m0n0 dot ch
> Emne: [m0n0wall-dev] Remote Administration and Webservices
> Hi,
> this is my first message here! I've discobered m0n0wall from pfsense a
> couple of months ago and these are a REALLY great work!!!
> I'm a .NET programmer, but i work with mono too, and i'm interested in
> writing an application to do remote managment of the firewall using
> webserivices (preferibly xml-rpc). A webservice that, like the webgui, act
> only as bridge between modules and the client, the remote managment
> application instead of the browser.
> Would be necessary to write a package that has a php file that act as xml
> rpc server so the remote managment application can pass requests and the
> webservice will response with the fields list of the package xml file with
> other stuff if necessary (live apply changes and similar)
> The interesting thing is that doing an application like this will let to
> be
> remotly managed any m0n0wall derivate (pfsense, freenas, askoziapbx) in
> the
> same way without changes to the remote managment application!
> Will be handy a reknown system too (udp broadcast packets) so the remote
> managment application send a specifically forged udp packet on the
> broadcast
> address and all m0n0wall based systems and derivates will ansewer saying
> that they exists and what they are (naturally this feature should be
> disableable from the package control panel :))
> What do you think about this?
> (sorry for the bad english but i'm italian :))
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash dev dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash dev dash help at lists dot m0n0 dot ch