FreeBSD Port: doorman-0.8

fbsd_user fbsd_user at a1poweruser.com
Fri Jun 24 13:21:28 GMT 2005


Your wrote

Even more would I appreciate if you were able to test doormand with
ipfw.
I don't have the time to set up infrastructure to do this test.

I reply.

Lets collaborate. I have a work bench infrastructure where I can
test doorman with all 3 of the FreeBSD built in firewalls IPF, IPFW,
and PF.

I have completed testing using IPF. I changed the ipf_add script and
added new comments. I am sending it to you as a attached file.

I also found a problem with the file permission as installed by the
port. The file permission have to be read, write, exec for owner
only. Owner has to be root. not just the files in
/usr/locat/etc/doormand  but also for doormand, knock, and .knockcf.

This afternoon I will run through the testing of PF and them IPFW.
All 3 firewall are based on the sample firewall files contained in
the handbook firewall section. I will keep you informed of any
changes I make to the firewall add scripts.

I also experienced some problems with the knock program and how it
process the .kickcf file. After I document the problem can you fix
it or should I report it to the doorman group at the sourceforge
project?




-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipf_add.before_block
Type: application/octet-stream
Size: 3101 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20050624/f39c16e4/ipf_add.obj


More information about the freebsd-ports mailing list