It is my plan that the upcoming release of Shorewall (1.3.14) will definitely be the last of the 1.3.x releases and will very probably be the last release of Shorewall 1.x.x. I will continue to support Shorewall 1.3 but will be making no more enhancements to it. I will be devoting my time to Shorewall 2. If anyone is interested in taking over the development of Shorewall 1, please let me know. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
At 2/4/2003 04:17 PM, Tom Eastep wrote:>I will continue to support Shorewall 1.3 but will be making no more >enhancements to it. I will be devoting my time to Shorewall 2.Do you already have a ''wish list'' for Shorewall 2.x ? -Gilson
--On Tuesday, February 04, 2003 5:11 PM -0200 Gilson Soares <g.soares@datacraft.com.br> wrote:> At 2/4/2003 04:17 PM, Tom Eastep wrote: >> I will continue to support Shorewall 1.3 but will be making no more >> enhancements to it. I will be devoting my time to Shorewall 2. > > Do you already have a ''wish list'' for Shorewall 2.x ? >There are several things that WON''T be in 2.0: a) Old Ping Handling. There won''t be any ''noping'' or ''forwardping'' interface options and there won''t be a FORWARDPING option in shorewall.conf. b) ''routestopped'' interface and hosts option. Use the routestopped file instead. c) MERGE_HOSTS. The only behavior available will be what MERGE_HOSTS=Yes provides in 1.3. Additionally, I think I''ve taken the shell-based Shorewall idea about as far as I want to so Shorewall 2 will be written in another language (probably another interpretive one though). I''ll make another attempt at getting myself excited about writing a GUI... -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
I would love to see a GUI that''s solid and intuitive as well. Just out of curiosity what new features can we expect in version 2?=0D =20
On the subject of a "wish list" for 2.0, I''d love to see the dynamic firewalling capabilities extended. Maybe integrate something like swatch to watch logfiles for patterns and modify the firewall accordingly. OR just maybe have a plugin type architecture where things like the gui, logwatcher, and such can be added on or left out (and developed) according to your needs. Just my $0.02 Sincerely, Jim Hubbard .--. |o_o | |:_/ | // \ \ (| | ) /''\_ _/`\ \___)=(___/ Rockingham County Linux Users Group www.rock.lug.net ____________________________________> -----Original Message----- > From: shorewall-users-bounces@lists.shorewall.net > [mailto:shorewall-users-bounces@lists.shorewall.net]On > Behalf Of Shaun > Marolf > Sent: Tuesday, February 04, 2003 3:07 PM > To: shorewall-users@lists.shorewall.net > Subject: Re: [Shorewall-users] About Shorewall 1.3.14 > > > I would love to see a GUI that''s solid and intuitive as > well. Just out of > curiosity what new features can we expect in version 2? > > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.shorewall.net > http://lists.shorewall.net/mailman/listinfo/shorewall-users >
>Additionally, I think I''ve taken the shell-based Shorewall idea about as >far as I want to so Shorewall 2 will be written in another language >(probably another interpretive one though). I''ll make another attempt at >getting myself excited about writing a GUI...Python is *very* cool. I''m working on a Python based logger for Shorewall now. I want to push all Shorewall traffic into a MySQL database, and then allow graphing and other querying/alerting/etc. capabilities from there. Regards, -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com
On Tue, 2003-02-04 at 13:08, Barry, Christopher wrote:> >Additionally, I think I''ve taken the shell-based Shorewall idea about as > >far as I want to so Shorewall 2 will be written in another language > >(probably another interpretive one though). I''ll make another attempt at > >getting myself excited about writing a GUI... > > > Python is *very* cool. I''m working on a Python based logger for Shorewall now. I want to push all Shorewall traffic into a MySQL database, and then allow graphing and other querying/alerting/etc. capabilities from there.Barry, Agreed. Python is nice, but it''s not small. What about using a language designed for embedded applications, like Lua or eforth/gforth? There is even a Lua package for LEAF releases/branches. http://www.lua.org/ http://directory.google.com/Top/Computers/Programming/Languages/Lua/ Here is a short run down of available languages. http://www.mail-archive.com/leaf-devel@lists.sourceforge.net/msg04263.html -- Mike Noyes <mhnoyes @ users.sourceforge.net> http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ http://sitedocs.sf.net/ http://ffl.sf.net/
--On Tuesday, February 04, 2003 4:08 PM -0500 "Barry, Christopher" <cbarry@infiniconsys.com> wrote:>> Additionally, I think I''ve taken the shell-based Shorewall idea about as >> far as I want to so Shorewall 2 will be written in another language >> (probably another interpretive one though). I''ll make another attempt at >> getting myself excited about writing a GUI... > > > Python is *very* cool. I''m working on a Python based logger for Shorewall > now. I want to push all Shorewall traffic into a MySQL database, and then > allow graphing and other querying/alerting/etc. capabilities from there. >Python is a leading candidate -- unfortunately, it isn''t very attractive to the LEAF folks. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net
Maybe LEAF can stay on the 1.x.x series. It works great, and it''s less filling! -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com office: 610.233.4747 direct: 610.233.4870 cell: 267.879.8321 -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: Tuesday, February 04, 2003 4:35 PM To: Shorewall Users Subject: RE: [Shorewall-users] About Shorewall 1.3.14 --On Tuesday, February 04, 2003 4:08 PM -0500 "Barry, Christopher" <cbarry@infiniconsys.com> wrote:>> Additionally, I think I''ve taken the shell-based Shorewall idea about as >> far as I want to so Shorewall 2 will be written in another language >> (probably another interpretive one though). I''ll make another attempt at >> getting myself excited about writing a GUI... > > > Python is *very* cool. I''m working on a Python based logger for Shorewall > now. I want to push all Shorewall traffic into a MySQL database, and then > allow graphing and other querying/alerting/etc. capabilities from there. >Python is a leading candidate -- unfortunately, it isn''t very attractive to the LEAF folks. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.shorewall.net http://lists.shorewall.net/mailman/listinfo/shorewall-users
On Tue, 2003-02-04 at 13:35, Tom Eastep wrote:> --On Tuesday, February 04, 2003 4:08 PM -0500 "Barry, Christopher" > <cbarry@infiniconsys.com> wrote: > > >> Additionally, I think I''ve taken the shell-based Shorewall idea about as > >> far as I want to so Shorewall 2 will be written in another language > >> (probably another interpretive one though). I''ll make another attempt at > >> getting myself excited about writing a GUI... > > > > > > Python is *very* cool. I''m working on a Python based logger for Shorewall > > now. I want to push all Shorewall traffic into a MySQL database, and then > > allow graphing and other querying/alerting/etc. capabilities from there. > > > > Python is a leading candidate -- unfortunately, it isn''t very attractive to > the LEAF folks.Tom, I hope the comparison below may persuade you to look at Lua. Lua Versus Python http://lua-users.org/wiki/LuaVersusPython -- Mike Noyes <mhnoyes @ users.sourceforge.net> http://sourceforge.net/users/mhnoyes/ http://leaf-project.org/ http://sitedocs.sf.net/ http://ffl.sf.net/
(kinda) off-topic... Here is a possible screenshot of Shorewall TNG 8^0 -- Christopher Barry Manager of Information Systems InfiniCon Systems http://www.infiniconsys.com -----Original Message----- From: Tom Eastep [mailto:teastep@shorewall.net] Sent: Tuesday, February 04, 2003 4:35 PM To: Shorewall Users Subject: RE: [Shorewall-users] About Shorewall 1.3.14 --On Tuesday, February 04, 2003 4:08 PM -0500 "Barry, Christopher" <cbarry@infiniconsys.com> wrote:>> Additionally, I think I''ve taken the shell-based Shorewall idea about as >> far as I want to so Shorewall 2 will be written in another language >> (probably another interpretive one though). I''ll make another attempt at >> getting myself excited about writing a GUI... > > > Python is *very* cool. I''m working on a Python based logger for Shorewall > now. I want to push all Shorewall traffic into a MySQL database, and then > allow graphing and other querying/alerting/etc. capabilities from there. >Python is a leading candidate -- unfortunately, it isn''t very attractive to the LEAF folks. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.shorewall.net http://lists.shorewall.net/mailman/listinfo/shorewall-users -------------- next part -------------- A non-text attachment was scrubbed... Name: safe computer practices.jpg Type: image/jpeg Size: 16985 bytes Desc: safe computer practices.jpg Url : http://lists.shorewall.net/pipermail/shorewall-users/attachments/20030204/92896816/safecomputerpractices.jpe
--On Tuesday, February 04, 2003 5:49 PM -0500 "Barry, Christopher" <cbarry@infiniconsys.com> wrote:> (kinda) off-topic... > > Here is a possible screenshot of Shorewall TNG > > 8^0:-) -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net Washington USA \ teastep@shorewall.net