Development October 2012

development@lists.ipfire.org

5 participants
15 discussions

Questions for adding code
by Alexander Marx 17 Oct '12

17 Oct '12

Hi list! As i only know ipcop, i hope you can help me here. I am thinking of developing some extracode for being able to configure vpn-Firewall rules via WUI. I don't know how to start. I just want to create a cgi, that is similar to the outgoing firewall with the exception that this configures the CUSTOMFORWARD Chain. The gui should create a txt file with the rules.... I need to know: 1) Where should i beginn to make ipfire read the rules on boot?! 2) How do i implement the code in the checked-out git repository local? 3) did i forget something? Greetings alex

2 1

Re: Firewall Question
by Michael Tremer 17 Oct '12

17 Oct '12

On Sat, 2012-10-13 at 19:54 +0200, Alexander Marx wrote: > Am 13.10.2012 19:18, schrieb Michael Tremer: > >> I already tried to play with the OVPNFORWARD Chain but had no luck. > > You should use CUSTOMFORWARD/CUSTOMINPUT for those rules. > ok. But why are there the chains OVPNINPUT and OVPNFORWARD?! > As far as i understand right now, these chains should be DROP ore > flushed, when Firewall is in mode 1, right? > And to think a bit further, when someone begins to develop an addon or > core function to create rules > for CUSTOMFORWARD with a webgui, is this sufficient for creating a > INCOMING Firewall?! (I know its FORWARD-Chain) > But i hope you understand what i mean. Those chains have been introduced with the OpenVPN addon. It was intended to build in-tunnel filtering, but that has never been implemented. If you would like to implement filtering for VPN tunnels, please use those chains. Don't put anything into CUSTOM* because these are for rules that are manually created by the user. OVPNINPUT and OVPNFORWARD work in exactly the same way. Same for IPSECINPUT and IPSECFORWARD. > >> It would be great if one can say: > >> Hey, VPN1 is only allowed to connect to my internal servers 192.168.0.2 > >> and 192.168.0.3 via RDP (3389) > >> ans that via gui > > You can use the outgoing firewall to limit some sorts of traffic, but > > you cannot block incoming packets with it. > > > >> I already developed addons for ipcop, but ipfire seems complete different... > > No, the web UI is pretty much the same (crap). The firewall scripts do > > not differ too much, either. > Well the way ipfire is compiled and the way addons are created is much > more complicated at a first sight. Indeed, there is a detailed guide how to start on our wiki. http://wiki.ipfire.org/en/development/build > If i would understand how to add changes to the ipfire, maybe i would > begin to develop some sort of > gui for creating some firewall-rules. > I think it is not so difficult, because it just takes a textfile for the > rules, and a table in webinterface where the rule positions can be > changed and created. And a funvtion, that reads the rules on every reboot. > > Do you agree so far?!! Yes, that's the way. Maybe it is a good idea to integrate that as native as possible into the WUI, because there already too many possibilities how to add firewall rules (portfw, xtaccess, outgoing firewall,...). Michael

1 0

Firewall Question
by Alexander Marx 13 Oct '12

13 Oct '12

Dear developers. Are there any plans to implement the possibillity to create firewall rules for openvpn subnets? Actually all vpn connections are able to do anything in the remotenetwork The only solution is to put own iptables rule in the /etc/sysconfig/firewall.local I already tried to play with the OVPNFORWARD Chain but had no luck. It would be great if one can say: Hey, VPN1 is only allowed to connect to my internal servers 192.168.0.2 and 192.168.0.3 via RDP (3389) ans that via gui I already developed addons for ipcop, but ipfire seems complete different... Greetings Al

2 1

Translation updates
by Michael Tremer 09 Oct '12

09 Oct '12

Hello, as of today, there are two new language teams working on translating the software of the IPFire project. The new languages are: Khmer (Cambodia) https://www.transifex.com/projects/p/ipfire/language/km_KH/ Catalan https://www.transifex.com/projects/p/ipfire/language/ca/ I am very happy that so many people are joining the translation project and help IPFire to make its way into the world. Despite the language teams, that have just started their work, there is plenty of work to do on other languages as well. If you speak one of those languages, please join. https://www.transifex.com/projects/p/ipfire/ Michael

1 0

New tool - pyPDNS
by Stefan Schantl 02 Oct '12

02 Oct '12

Hello, today I want to introduce you to pyPDNS. I is designed as an administration tool for the authoritative DNS server from PowerDNS, and is completely written in Python. When development has been finished, it's goal will be to get, add / remove or to edit zones and their records directly on the PDNS sqlite3 database backend. It will be possible to use it as a command line interface or by import it into other python applications like the web interface of IPFire 3. I've just created the git repository and pushed it on our git server, so the development process is an an very early state and a lot of important functions are still missing. At the moment it is only possible to use the API and the CLI to get the configured zones and records. If you are interested on these tool, you can get the source code here: http://git.ipfire.org/?p=people/stevee/pypdns.git;a=summary

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development October 2012