[ previous ] [ next ] [ threads ]
 
 From:  edward mzj <edward dot mzj at gmail dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: A few modification to m0n0, anyone interested?
 Date:  Thu, 25 Aug 2005 21:59:51 +0800
news, span port support has been added
patch file
http://61.132.118.190/m0n0/1.2b9/p3.patch.latest

img file
http://61.132.118.190/m0n0/1.2b9/generic-pc-1.2b9.0508252024.img

to use the feature, goto system->advanced page. a option called 'Span
default rules' is appended. when enabled, all packets handled by those
machine generated default rules will be sent out the span interface.
there is also a 'span' option available when adding or editing a
firewall rule. when enabled, packets handled by that rule will be sent
out the span interface.

befor using this feature, a physical interface must be marked as the
'span' interface, either by the console menu, or by adding the <span>
section in the <interfaces> section in the config.xml, eg:
<span>
<if>fxp2</if>
</span>

and the span interface must be a dedicated interface and can't be a
wireless interface, for the security reason.

sorry for my poor english

2005/8/8, edward mzj <edward dot mzj at gmail dot com>:
> news, files are updated since the last post(bug fix)
> 
> what's next? may be add support for 'span' interface, like span ports
> in most managable switches, so that interested traffic can be arbita
> to a packet sniffer or a snort ids.
> 
> 2005/8/7, edward mzj <edward dot mzj at gmail dot com>:
> > sorry. gmail messed up the patch file. it can be downloaded @
> > http://61.132.118.190/m0n0/1.2b9/p3.patch
> >
> > 2005/8/7, edward mzj <edward dot mzj at gmail dot com>:
> > > hi guys, i just added a few codes to m0n0, enabling inbound/outbound
> > > nat on lan interface, policy outbound nat, and inbound load-balancing
> > > on a simple round-robin basis. anyone interested?
> >
>