Dear Shorewall Users, having noticed that the request for a WebGUI is growing, after a very short conversation I''ve had with Tom, I''d like to let you all evaluate the Web interface to Shorewall I''ve written, integrating the original weblet package made available for the LRP project. ---------------------------------------------------------------------------- Preamble Thank you Tom for every nice thing - Shorewall included - you have taugth and given us ---------------------------------------------------------------------------- Features (or limitations: it depends on your point of view...) * the GUI is made of shell scripts -- no other programming language, no extra software to install (well, system utilities only) * runs on almost any httpd server - tested on many LRP specific servers such as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - apache * the web server doesn''t need to be root in order to get write privileges to Shorewall files * .htaccess ready * edit Shorewall main configuration files, executes Shorewall commands (start, stop, restart, status, ...) * shows system/Shorewall logs * multi-language ready (english/italian) * IE/Firefox compatible Hosting system prerequisites (besides Shorewall specifics) * sudo utility (usually part of all distro, anyhow available at http://www.courtesan.com/sudo/) Curious enough? URL: http://62.110.196.251 User: awdwall Password: gogetit Any comments, critics, suggestions, opinions are more than welcome. Support Please don''t even think I''ll be able to react to your requests/bug reports as ''someone'' ;-) else does (altough I''ll try to do the best my competence - and the time available - will allow). I''m not a real guru and most of what I''ve done to make those script working - starting from the basic knowledge of *nix - is self-taught so please put into consideration a good profusion of patience from your side -- this is my first open source experience. Actions What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 distro an mounted on a embedded system -- activities are undergoing to move the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). I think that after Tom stated that Shorewall will remain pretty stable in terms of structure for a reasonable long period of time, there are good chaches to make the script compatible with the current release. Depending on the number of requests I will receive, the package will be made available to the Shorewall community under the GNU GPL license -- expected release date: Mar 31, 2005 That''s all, folks! Have a nice day, Andrea Galmacci
Andrea, Your project looks pretty great and I like a couple of things that you''ve done with it. Unfortunately, for me at least, webmin is the way to go. Our company already makes extensive use of linux servers with webmin interfaces (for the point and click crowd). Webmin integrates combinations of services very nicely which really makes things easy to adminster. -Gary
On Wed, 2005-03-09 at 09:30, Gary Buckmaster wrote:> Andrea, > > Your project looks pretty great and I like a couple of things that > you''ve done with it. Unfortunately, for me at least, webmin is the > way to go. Our company already makes extensive use of linux servers > with webmin interfaces (for the point and click crowd). Webmin > integrates combinations of services very nicely which really makes > things easy to adminster. > > -GaryAndrea, I really like your project, I don''t use webmin but do have some point and clickers that need access to their own firewall. Those people have to call tech support (me) to update the firewall settings. This project looks like it will alleviate some of those calls and allow the point and clickers to point and click and only have to type a little in a friendly web interface. I am really looking forward to this project! Thanks! _ /-\ ndrew
> Features (or limitations: it depends on your point of view...) > > * the GUI is made of shell scripts -- no other programming language, no > extra software to install (well, system utilities only)Cool.> * runs on almost any httpd server - tested on many LRP specific servers > such > as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - > apacheCool.> * the web server doesn''t need to be root in order to get write privileges > to > Shorewall filesVery good.> * .htaccess ready > * edit Shorewall main configuration files, executes Shorewall commands > (start, stop, restart, status, ...) > * shows system/Shorewall logsNice.> * multi-language ready (english/italian) > * IE/Firefox compatible > > Hosting system prerequisites (besides Shorewall specifics) > > * sudo utility (usually part of all distro, anyhow available at > http://www.courtesan.com/sudo/) > > Curious enough? > > URL: http://62.110.196.251 > User: awdwall > Password: gogetit > > Any comments, critics, suggestions, opinions are more than welcome.Congratulations, it already looks and works great! And I very much like the fact that it''s shell based - like shorewall. Two things: 1) I know many peoples like to use webmin and I think it should be possible to include the WebGUI in webmin the same way like SWAT is integrated in webmin. 2) I''m quite sure I''ll provide RedHat/Fedora rpms once the WebGUI is released. Simon
Simon Matter wrote: ...> > Congratulations, it already looks and works great! And I very much like > the fact that it''s shell based - like shorewall. > > Two things: > 1) I know many peoples like to use webmin and I think it should be > possible to include the WebGUI in webmin the same way like SWAT is > integrated in webmin. >I prefer this architecture, personally -- I''ve never been much of a Webmin fan.> 2) I''m quite sure I''ll provide RedHat/Fedora rpms once the WebGUI is > released. >And I''d like to provide a Mandrake RPM as well. -- Jack at Monkeynoodle dot Org: It''s a Scientific Venture... Riding the Emergency Third Rail Power Trip since 1996!
> > > I prefer this architecture, personally -- I''ve never been much of a > Webmin fan.Me too. Thanks for this tool, this is what a was waiting for, we have many firewall/proxy boxes for customers, they only want to add some rule or blacklist some ip, etc, i dont want to install webmin for these tasks, where can we getit and help with testing,etc Miguel
Hello, Well done, I like the interface, it is simple, and to to the point But I think the Current Webmin module is more user friendly, and on the functionality level, both almost have the same features I think, if we take the current webmin module, and modify it to add the new features that Shorewall 2 have, will be one of the best practice Waiting for your comments Kind Regards Samer>From: "Andrea Galmacci - awd" <andrea@awd.it> >Reply-To: Mailing List for Shorewall Users ><shorewall-users@lists.shorewall.net> >To: "Shorewall Users Mailing List" <shorewall-users@lists.shorewall.net> >Subject: [Shorewall-users] WebGUI Scripts announcement >Date: Wed, 9 Mar 2005 16:25:58 +0100 > >Dear Shorewall Users, having noticed that the request for a WebGUI is >growing, after a very short conversation I''ve had with Tom, I''d like to >let you all evaluate the Web interface to Shorewall I''ve written, >integrating the original weblet package made available for the LRP project. >---------------------------------------------------------------------------- >Preamble > >Thank you Tom for every nice thing - Shorewall included - you have taugth >and given us >---------------------------------------------------------------------------- >Features (or limitations: it depends on your point of view...) > >* the GUI is made of shell scripts -- no other programming language, no > extra software to install (well, system utilities only) >* runs on almost any httpd server - tested on many LRP specific servers >such > as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - > apache >* the web server doesn''t need to be root in order to get write privileges >to > Shorewall files >* .htaccess ready >* edit Shorewall main configuration files, executes Shorewall commands > (start, stop, restart, status, ...) >* shows system/Shorewall logs >* multi-language ready (english/italian) >* IE/Firefox compatible > >Hosting system prerequisites (besides Shorewall specifics) > >* sudo utility (usually part of all distro, anyhow available at > http://www.courtesan.com/sudo/) > >Curious enough? > >URL: http://62.110.196.251 >User: awdwall >Password: gogetit > >Any comments, critics, suggestions, opinions are more than welcome. > >Support > >Please don''t even think I''ll be able to react to your requests/bug reports >as ''someone'' ;-) else does (altough I''ll try to do the best my competence - >and the time available - will allow). I''m not a real guru and most of what >I''ve done to make those script working - starting from the basic knowledge >of *nix - is self-taught so please put into consideration a good profusion >of patience from your side -- this is my first open source experience. > >Actions > >What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 >distro an mounted on a embedded system -- activities are undergoing to move >the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). >I think that after Tom stated that Shorewall will remain pretty stable in >terms of structure for a reasonable long period of time, there are good >chaches to make the script compatible with the current release. >Depending on the number of requests I will receive, the package will be >made >available to the Shorewall community under the GNU GPL license -- expected >release date: Mar 31, 2005 > > >That''s all, folks! > >Have a nice day, > Andrea Galmacci > > > > >_______________________________________________ >Shorewall-users mailing list >Post: Shorewall-users@lists.shorewall.net >Subscribe/Unsubscribe: >https://lists.shorewall.net/mailman/listinfo/shorewall-users >Support: http://www.shorewall.net/support.htm >FAQ: http://www.shorewall.net/FAQ.htm_________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it''s FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
ppl, I do not understand There is already a webmin interface, butnot with all features, why you are not using it Kind Regards Samer>From: Andrew Niemantsverdriet <lists@pure-wireless.net> >Reply-To: Mailing List for Shorewall Users ><shorewall-users@lists.shorewall.net> >To: Gary Buckmaster <inherently.evil@gmail.com>,Mailing List for Shorewall >Users <shorewall-users@lists.shorewall.net> >Subject: Re: [Shorewall-users] WebGUI Scripts announcement >Date: Wed, 09 Mar 2005 10:46:17 -0700 > >On Wed, 2005-03-09 at 09:30, Gary Buckmaster wrote: > > Andrea, > > > > Your project looks pretty great and I like a couple of things that > > you''ve done with it. Unfortunately, for me at least, webmin is the > > way to go. Our company already makes extensive use of linux servers > > with webmin interfaces (for the point and click crowd). Webmin > > integrates combinations of services very nicely which really makes > > things easy to adminster. > > > > -Gary > >Andrea, >I really like your project, I don''t use webmin but do have some point >and clickers that need access to their own firewall. Those people have >to call tech support (me) to update the firewall settings. This project >looks like it will alleviate some of those calls and allow the point and >clickers to point and click and only have to type a little in a friendly >web interface. I am really looking forward to this project! > >Thanks! > _ >/-\ ndrew > >_______________________________________________ >Shorewall-users mailing list >Post: Shorewall-users@lists.shorewall.net >Subscribe/Unsubscribe: >https://lists.shorewall.net/mailman/listinfo/shorewall-users >Support: http://www.shorewall.net/support.htm >FAQ: http://www.shorewall.net/FAQ.htm_________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it''s FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
Thank you Miguel for your comments -- that''s exactly awdwall was intended for... happy to share that point with you too. Best regards, - Andrea ----- Original Message ----- From: <mmiranda@americatel.com.sv> To: <shorewall-users@lists.shorewall.net> Sent: Thursday, March 10, 2005 12:34 AM Subject: RE: [Shorewall-users] WebGUI Scripts announcement> > > > > > I prefer this architecture, personally -- I''ve never been much of a > > Webmin fan. > > Me too. > > Thanks for this tool, this is what a was waiting for, we have many > firewall/proxy boxes for customers, they only want to add some rule or > blacklist some ip, etc, i dont want to install webmin for these tasks, > where can we getit and help with testing,etc > > > Miguel > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > >
Jack, that is very good! -- who''s taking care for the Debian package? ;-) Best regards, - Andrea ----- Original Message ----- From: "Jack Coates" <jack@monkeynoodle.org> To: "Mailing List for Shorewall Users" <shorewall-users@lists.shorewall.net> Sent: Thursday, March 10, 2005 12:33 AM Subject: Re: [Shorewall-users] WebGUI Scripts announcement> Simon Matter wrote: > ... > > > > Congratulations, it already looks and works great! And I very much like > > the fact that it''s shell based - like shorewall. > > > > Two things: > > 1) I know many peoples like to use webmin and I think it should be > > possible to include the WebGUI in webmin the same way like SWAT is > > integrated in webmin. > > > > I prefer this architecture, personally -- I''ve never been much of a > Webmin fan. > > > 2) I''m quite sure I''ll provide RedHat/Fedora rpms once the WebGUI is > > released. > > > > And I''d like to provide a Mandrake RPM as well. > > -- > Jack at Monkeynoodle dot Org: It''s a Scientific Venture... > Riding the Emergency Third Rail Power Trip since 1996! > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > > >
> ppl, > > I do not understand > > There is already a webmin interface, butnot with all features, why you are > not using it1) The webmin module is not up2date with shorewall development IIRC. 2) Not everybody wants to install webmin on their firewall. Simon> > Kind Regards > Samer > >>From: Andrew Niemantsverdriet <lists@pure-wireless.net> >>Reply-To: Mailing List for Shorewall Users >><shorewall-users@lists.shorewall.net> >>To: Gary Buckmaster <inherently.evil@gmail.com>,Mailing List for >> Shorewall >>Users <shorewall-users@lists.shorewall.net> >>Subject: Re: [Shorewall-users] WebGUI Scripts announcement >>Date: Wed, 09 Mar 2005 10:46:17 -0700 >> >>On Wed, 2005-03-09 at 09:30, Gary Buckmaster wrote: >> > Andrea, >> > >> > Your project looks pretty great and I like a couple of things that >> > you''ve done with it. Unfortunately, for me at least, webmin is the >> > way to go. Our company already makes extensive use of linux servers >> > with webmin interfaces (for the point and click crowd). Webmin >> > integrates combinations of services very nicely which really makes >> > things easy to adminster. >> > >> > -Gary >> >>Andrea, >>I really like your project, I don''t use webmin but do have some point >>and clickers that need access to their own firewall. Those people have >>to call tech support (me) to update the firewall settings. This project >>looks like it will alleviate some of those calls and allow the point and >>clickers to point and click and only have to type a little in a friendly >>web interface. I am really looking forward to this project! >> >>Thanks! >> _ >>/-\ ndrew >> >>_______________________________________________ >>Shorewall-users mailing list >>Post: Shorewall-users@lists.shorewall.net >>Subscribe/Unsubscribe: >>https://lists.shorewall.net/mailman/listinfo/shorewall-users >>Support: http://www.shorewall.net/support.htm >>FAQ: http://www.shorewall.net/FAQ.htm > > _________________________________________________________________ > Express yourself instantly with MSN Messenger! Download today it''s FREE! > http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ > > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: > https://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > >
Thank you Simon for your positive comments.> > Two things: > 1) I know many peoples like to use webmin and I think it should be > possible to include the WebGUI in webmin the same way like SWAT is > integrated in webmin. >Yes, probably as a simple web wrapper...> 2) I''m quite sure I''ll provide RedHat/Fedora rpms once the WebGUI is > released. > > Simon >Very good! Best regards, - Andrea> _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > >
Gary, let me thank you first for your comments. I didn''t choose the webmin way probably because I was focused on not-so-resources-plenty embedded systems and I considered learning the webmin architecture more complex, as a beginner, to start with. To my modest opinion the purpose of awdwall scripts (just to give them a name) is - as some other people on the list already catched - to give a basic interface to the most commonly used Shorewall settings and functions following the rule ''simple interface --> basic settings'', leaving what we can call ''structural settings'' managed the conventional way (better approach for safety reasons as well - you cannot damage what you''re not dealing with) to a greater and deeper confidence level . I''m interested as well on the webmin module to be used on full distros... my best wishes to the team! Best regards, - Andrea ----- Original Message ----- From: "Gary Buckmaster" <inherently.evil@gmail.com> To: "Mailing List for Shorewall Users" <shorewall-users@lists.shorewall.net> Sent: Wednesday, March 09, 2005 5:30 PM Subject: Re: [Shorewall-users] WebGUI Scripts announcement> Andrea, > > Your project looks pretty great and I like a couple of things that > you''ve done with it. Unfortunately, for me at least, webmin is the > way to go. Our company already makes extensive use of linux servers > with webmin interfaces (for the point and click crowd). Webmin > integrates combinations of services very nicely which really makes > things easy to adminster. > > -Gary > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > > >
Paul, the code will be released open-source GNU GPL next March 31: as I stated in the announcement, the system you are playing with is an embedded system with a small barebone httpd server (thttpd for curiosity''s sake http://www.acme.com/software/thttpd/) -- porting it to a full distro with apache as httpd server has made the script collection more critical and so at the moemnt the code is under daily tuning - I''m testing it intensively to make it available by the excpeted delivery date. Thank you. Best regards, - Andrea ----- Original Message ----- From: "Paul" <lists@loudas.com> To: "Mailing List for Shorewall Users" <shorewall-users@lists.shorewall.net> Sent: Thursday, March 10, 2005 11:07 PM Subject: Re: [Shorewall-users] WebGUI Scripts announcement> Andrea Galmacci - awd wrote: > > >Dear Shorewall Users, having noticed that the request for a WebGUI is > >growing, after a very short conversation I''ve had with Tom, I''d like to > >let you all evaluate the Web interface to Shorewall I''ve written, > >integrating the original weblet package made available for the LRPproject.> >----------------------------------------------------------------------------> >Preamble > > > >Thank you Tom for every nice thing - Shorewall included - you have taugth > >and given us > >----------------------------------------------------------------------------> >Features (or limitations: it depends on your point of view...) > > > >* the GUI is made of shell scripts -- no other programming language, no > > extra software to install (well, system utilities only) > >* runs on almost any httpd server - tested on many LRP specific serverssuch> > as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - > > apache > >* the web server doesn''t need to be root in order to get write privilegesto> > Shorewall files > >* .htaccess ready > >* edit Shorewall main configuration files, executes Shorewall commands > > (start, stop, restart, status, ...) > >* shows system/Shorewall logs > >* multi-language ready (english/italian) > >* IE/Firefox compatible > > > >Hosting system prerequisites (besides Shorewall specifics) > > > >* sudo utility (usually part of all distro, anyhow available at > > http://www.courtesan.com/sudo/) > > > >Curious enough? > > > >URL: http://62.110.196.251 > >User: awdwall > >Password: gogetit > > > >Any comments, critics, suggestions, opinions are more than welcome. > > > >Support > > > >Please don''t even think I''ll be able to react to your requests/bugreports> >as ''someone'' ;-) else does (altough I''ll try to do the best mycompetence -> >and the time available - will allow). I''m not a real guru and most ofwhat> >I''ve done to make those script working - starting from the basicknowledge> >of *nix - is self-taught so please put into consideration a goodprofusion> >of patience from your side -- this is my first open source experience. > > > >Actions > > > >What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 > >distro an mounted on a embedded system -- activities are undergoing tomove> >the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). > >I think that after Tom stated that Shorewall will remain pretty stable in > >terms of structure for a reasonable long period of time, there are good > >chaches to make the script compatible with the current release. > >Depending on the number of requests I will receive, the package will bemade> >available to the Shorewall community under the GNU GPL license --expected> >release date: Mar 31, 2005 > > > > > >That''s all, folks! > > > >Have a nice day, > > Andrea Galmacci > > > > > > > > > >_______________________________________________ > >Shorewall-users mailing list > >Post: Shorewall-users@lists.shorewall.net > >Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> >Support: http://www.shorewall.net/support.htm > >FAQ: http://www.shorewall.net/FAQ.htm > > > > > > > that''s really nice. and not relianbt on something heavy and bloaty which > I like. > > Is there a chance of seeing the code? > > Paul. > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > >
Andrea Galmacci - awd wrote:>Paul, the code will be released open-source GNU GPL next March 31: as I >stated in the announcement, the system you are playing with is an embedded >system with a small barebone httpd server (thttpd for curiosity''s sake >http://www.acme.com/software/thttpd/) -- porting it to a full distro with >apache as httpd server has made the script collection more critical and so >at the moemnt the code is under daily tuning - I''m testing it intensively >to make it available by the excpeted delivery date. > >that excellnet news. I''ll keep an eye out for it. I''ll not at all interested in a full distro, but a small package that doesn''t require heavy apps like apache or webmin looks very attractive. Good work !!! Paul.
Andrea Galmacci - awd wrote:>Dear Shorewall Users, having noticed that the request for a WebGUI is >growing, after a very short conversation I''ve had with Tom, I''d like to >let you all evaluate the Web interface to Shorewall I''ve written, >integrating the original weblet package made available for the LRP project. >---------------------------------------------------------------------------- >Preamble > >Thank you Tom for every nice thing - Shorewall included - you have taugth >and given us >---------------------------------------------------------------------------- >Features (or limitations: it depends on your point of view...) > >* the GUI is made of shell scripts -- no other programming language, no > extra software to install (well, system utilities only) >* runs on almost any httpd server - tested on many LRP specific servers such > as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - > apache >* the web server doesn''t need to be root in order to get write privileges to > Shorewall files >* .htaccess ready >* edit Shorewall main configuration files, executes Shorewall commands > (start, stop, restart, status, ...) >* shows system/Shorewall logs >* multi-language ready (english/italian) >* IE/Firefox compatible > >Hosting system prerequisites (besides Shorewall specifics) > >* sudo utility (usually part of all distro, anyhow available at > http://www.courtesan.com/sudo/) > >Curious enough? > >URL: http://62.110.196.251 >User: awdwall >Password: gogetit > >Any comments, critics, suggestions, opinions are more than welcome. > >Support > >Please don''t even think I''ll be able to react to your requests/bug reports >as ''someone'' ;-) else does (altough I''ll try to do the best my competence - >and the time available - will allow). I''m not a real guru and most of what >I''ve done to make those script working - starting from the basic knowledge >of *nix - is self-taught so please put into consideration a good profusion >of patience from your side -- this is my first open source experience. > >Actions > >What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 >distro an mounted on a embedded system -- activities are undergoing to move >the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). >I think that after Tom stated that Shorewall will remain pretty stable in >terms of structure for a reasonable long period of time, there are good >chaches to make the script compatible with the current release. >Depending on the number of requests I will receive, the package will be made >available to the Shorewall community under the GNU GPL license -- expected >release date: Mar 31, 2005 > > >That''s all, folks! > >Have a nice day, > Andrea Galmacci > > > > >_______________________________________________ >Shorewall-users mailing list >Post: Shorewall-users@lists.shorewall.net >Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users >Support: http://www.shorewall.net/support.htm >FAQ: http://www.shorewall.net/FAQ.htm > > >that''s really nice. and not relianbt on something heavy and bloaty which I like. Is there a chance of seeing the code? Paul.
As promised... http://www.awd.it/awdwall One more indication (last minute flash): the .htpasswd provided with the tarball has to be canceled - to create a new one please go there http://www.flash.net/cgi-bin/pw.pl My .02, Andrea ----- Original Message ----- From: "Andrea Galmacci - awd" <andrea@awd.it> To: "Shorewall Users Mailing List" <shorewall-users@lists.shorewall.net> Sent: Wednesday, March 09, 2005 5:25 PM Subject: [Shorewall-users] WebGUI Scripts announcement> Dear Shorewall Users, having noticed that the request for a WebGUI is > growing, after a very short conversation I''ve had with Tom, I''d like to > let you all evaluate the Web interface to Shorewall I''ve written, > integrating the original weblet package made available for the LRPproject.> ----------------------------------------------------------------------------> Preamble > > Thank you Tom for every nice thing - Shorewall included - you have taugth > and given us > ----------------------------------------------------------------------------> Features (or limitations: it depends on your point of view...) > > * the GUI is made of shell scripts -- no other programming language, no > extra software to install (well, system utilities only) > * runs on almost any httpd server - tested on many LRP specific serverssuch> as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - > apache > * the web server doesn''t need to be root in order to get write privilegesto> Shorewall files > * .htaccess ready > * edit Shorewall main configuration files, executes Shorewall commands > (start, stop, restart, status, ...) > * shows system/Shorewall logs > * multi-language ready (english/italian) > * IE/Firefox compatible > > Hosting system prerequisites (besides Shorewall specifics) > > * sudo utility (usually part of all distro, anyhow available at > http://www.courtesan.com/sudo/) > > Curious enough? > > URL: http://62.110.196.251 > User: awdwall > Password: gogetit > > Any comments, critics, suggestions, opinions are more than welcome. > > Support > > Please don''t even think I''ll be able to react to your requests/bug reports > as ''someone'' ;-) else does (altough I''ll try to do the best mycompetence -> and the time available - will allow). I''m not a real guru and most of what > I''ve done to make those script working - starting from the basic knowledge > of *nix - is self-taught so please put into consideration a good profusion > of patience from your side -- this is my first open source experience. > > Actions > > What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 > distro an mounted on a embedded system -- activities are undergoing tomove> the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). > I think that after Tom stated that Shorewall will remain pretty stable in > terms of structure for a reasonable long period of time, there are good > chaches to make the script compatible with the current release. > Depending on the number of requests I will receive, the package will bemade> available to the Shorewall community under the GNU GPL license -- expected > release date: Mar 31, 2005 > > > That''s all, folks! > > Have a nice day, > Andrea Galmacci > > > > > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe:https://lists.shorewall.net/mailman/listinfo/shorewall-users> Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm > >
excellent !!! I''m in the process of rebuilding my firewall now (practising what I preach) I''ll chuck this on, and see how it goes. Paul. Andrea Galmacci - awd wrote:>As promised... > >http://www.awd.it/awdwall > >One more indication (last minute flash): the .htpasswd provided with the >tarball has to be canceled - to create a new one please go there >http://www.flash.net/cgi-bin/pw.pl > > >My .02, >Andrea > > >----- Original Message ----- >From: "Andrea Galmacci - awd" <andrea@awd.it> >To: "Shorewall Users Mailing List" <shorewall-users@lists.shorewall.net> >Sent: Wednesday, March 09, 2005 5:25 PM >Subject: [Shorewall-users] WebGUI Scripts announcement > > > > >>Dear Shorewall Users, having noticed that the request for a WebGUI is >>growing, after a very short conversation I''ve had with Tom, I''d like to >>let you all evaluate the Web interface to Shorewall I''ve written, >>integrating the original weblet package made available for the LRP >> >> >project. > > >>-------------------------------------------------------------------------- >> >> >-- > > >>Preamble >> >>Thank you Tom for every nice thing - Shorewall included - you have taugth >>and given us >>-------------------------------------------------------------------------- >> >> >-- > > >>Features (or limitations: it depends on your point of view...) >> >>* the GUI is made of shell scripts -- no other programming language, no >> extra software to install (well, system utilities only) >>* runs on almost any httpd server - tested on many LRP specific servers >> >> >such > > >> as sh-httpd (shell based as well), mini-httpd, thttpd, and - of course - >> apache >>* the web server doesn''t need to be root in order to get write privileges >> >> >to > > >> Shorewall files >>* .htaccess ready >>* edit Shorewall main configuration files, executes Shorewall commands >> (start, stop, restart, status, ...) >>* shows system/Shorewall logs >>* multi-language ready (english/italian) >>* IE/Firefox compatible >> >>Hosting system prerequisites (besides Shorewall specifics) >> >>* sudo utility (usually part of all distro, anyhow available at >> http://www.courtesan.com/sudo/) >> >>Curious enough? >> >>URL: http://62.110.196.251 >>User: awdwall >>Password: gogetit >> >>Any comments, critics, suggestions, opinions are more than welcome. >> >>Support >> >>Please don''t even think I''ll be able to react to your requests/bug reports >>as ''someone'' ;-) else does (altough I''ll try to do the best my >> >> >competence - > > >>and the time available - will allow). I''m not a real guru and most of what >>I''ve done to make those script working - starting from the basic knowledge >>of *nix - is self-taught so please put into consideration a good profusion >>of patience from your side -- this is my first open source experience. >> >>Actions >> >>What you''ll play with is a stable 1.4.2 code installed over a Bering 1.2 >>distro an mounted on a embedded system -- activities are undergoing to >> >> >move > > >>the code to a ''full'' distro (now testing on a RH 9 with standard RPMs). >>I think that after Tom stated that Shorewall will remain pretty stable in >>terms of structure for a reasonable long period of time, there are good >>chaches to make the script compatible with the current release. >>Depending on the number of requests I will receive, the package will be >> >> >made > > >>available to the Shorewall community under the GNU GPL license -- expected >>release date: Mar 31, 2005 >> >> >>That''s all, folks! >> >>Have a nice day, >> Andrea Galmacci >> >> >> >> >>_______________________________________________ >>Shorewall-users mailing list >>Post: Shorewall-users@lists.shorewall.net >>Subscribe/Unsubscribe: >> >> >https://lists.shorewall.net/mailman/listinfo/shorewall-users > > >>Support: http://www.shorewall.net/support.htm >>FAQ: http://www.shorewall.net/FAQ.htm >> >> >> >> > > >_______________________________________________ >Shorewall-users mailing list >Post: Shorewall-users@lists.shorewall.net >Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users >Support: http://www.shorewall.net/support.htm >FAQ: http://www.shorewall.net/FAQ.htm > > >
Andrea Galmacci - awd wrote:> Dear Shorewall Users, having noticed that the request for a WebGUI is > growing, after a very short conversation I''ve had with Tom, I''d like to > let you all evaluate the Web interface to Shorewall I''ve written, > integrating the original weblet package made available for the LRP project. > ----------------------------------------------------------------------------... I''ve packaged this script set for Mandrake, but have only done minimal testing. It''s available at http://www.monkeynoodle.org/comp/net/shorewall/ if anyone wants to play with it. Comments/suggestions welcome. Andrea, it would be helpful if you could package your scripts within a directory named "awdwall-$version_number" within the tarball. E.g.: awdwall-0.9.tar.bz2 awdwall-0.9 etc sudoers-awd var ... -- Jack at Monkeynoodle dot Org: It''s a Scientific Venture... Riding the Emergency Third Rail Power Trip since 1996!
Jack Coates wrote:> Andrea Galmacci - awd wrote: > >> Dear Shorewall Users, having noticed that the request for a WebGUI is >> growing, after a very short conversation I''ve had with Tom, I''d like to >> let you all evaluate the Web interface to Shorewall I''ve written, >> integrating the original weblet package made available for the LRP >> project. >> ---------------------------------------------------------------------------- >> > > ... > > I''ve packaged this script set for Mandrake, but have only done minimal > testing. It''s available at > http://www.monkeynoodle.org/comp/net/shorewall/ if anyone wants to play > with it. Comments/suggestions welcome.Oh yes, I''ve also posted a Mandrake package (again, really untested) of thttpd (http://acme.com), for those who don''t care to run Apache on a firewall. It all ought to work together, in theory. -- Jack at Monkeynoodle dot Org: It''s a Scientific Venture... Riding the Emergency Third Rail Power Trip since 1996!