Development

development@lists.ipfire.org

2 participants
6279 discussions

Testing, testing, testing PLEASE!
by Alexander Marx 29 Oct '12

29 Oct '12

Dear List! Code is freezed for testing now. Please be aware that this code will eat your dog and burn your house! Please test it in a nonproductive environment and tell me what you find. This is essential for my ongoing project to implement a "vpn-Firewall WUI". Any feedback (as always) is greatly appreciated. I don't expect any errors but i like you to have another pair of eyes on the code. Thank you! -- -- sign Alexander Marx Fachinformatiker Systemintegration

3 2

Again: Request for feedback
by Alexander Marx 26 Oct '12

26 Oct '12

Dear List! I did not get any feedback except from michael. My code is nearly completed and i like you to have a look at my screenies. As you can see, i adapted the table with the vpn-connections and replaced the "valid-till" field with a "vpn net" field. I also implemented the possibility to check a "redirect gateway" box. In a further development state i will add another field for iroute entrys so that the roadwarrior is able to route his network. Thank you Alex

1 0

Request for feedback
by Alexander Marx 23 Oct '12

23 Oct '12

Hi! I am thinking of developing a GUI for vpn Firewallrules. unfortunately there are a few things to be done before i can implement this. The goal is to have a gui where one can say: i want Roadwarrior1 to be able to have access to a specific ip in green. To be able to do this, we need the possibility to assign a roadwarrior a fix ip-Address. This is actually not possible because of the DHCP Openvpn Subnet. So the first thing to be done should be to implement a gui that can manage CCD Networks for the openvpn Server. Here lies the next problem: many installations are using the dhcp Subnet from the openvpn server. So we need a solution that can manage both: DHCP Openvpn AND CCD Clients. I began to develop a kind of gui, it is still under heavy development and not ready yet. I like you to have a look at my early screenshots and give any feedback. If you like it, i will go on building that gui. Thank you -- -- sign Alexander Marx Fachinformatiker Systemintegration

2 2

Core63 no webdav anymore
by Daniel Weismüller 20 Oct '12

20 Oct '12

Hi! I've installed core63 and my apache crashed because apache can't handle webdav anymore. :( This is really bad for me because I used it for my and my wifes calendar. - Daniel -- You need a firewall? Easy to use? Powerful? Modular? For free? www.ipfire.org An Open Source Firewall Solution

2 1

Pakfire3 running on IPFire 2
by Michael Tremer 18 Oct '12

18 Oct '12

Hello, Erik and Stefan, you have been working on getting pakfire 3 working on IPFire 2, recently. I tried to build it today just for my little testing games and there are still (at least) two requirements missing: elfutils and beecrypt. So the question is: Did you disable parts of the package so you won't need those two or did I miss to merge a patch you sent me? I would like to have pakfire3 as a regular package in IPFire 2, because a lot of people would like to use IPFire 2 as a build platform for IPFire 3. Setting up an other box with some mainstream distro is just extra work. Michael

2 2

Questions for adding code
by Alexander Marx 17 Oct '12

17 Oct '12

Hi list! As i only know ipcop, i hope you can help me here. I am thinking of developing some extracode for being able to configure vpn-Firewall rules via WUI. I don't know how to start. I just want to create a cgi, that is similar to the outgoing firewall with the exception that this configures the CUSTOMFORWARD Chain. The gui should create a txt file with the rules.... I need to know: 1) Where should i beginn to make ipfire read the rules on boot?! 2) How do i implement the code in the checked-out git repository local? 3) did i forget something? Greetings alex

2 1

Re: Firewall Question
by Michael Tremer 17 Oct '12

17 Oct '12

On Sat, 2012-10-13 at 19:54 +0200, Alexander Marx wrote: > Am 13.10.2012 19:18, schrieb Michael Tremer: > >> I already tried to play with the OVPNFORWARD Chain but had no luck. > > You should use CUSTOMFORWARD/CUSTOMINPUT for those rules. > ok. But why are there the chains OVPNINPUT and OVPNFORWARD?! > As far as i understand right now, these chains should be DROP ore > flushed, when Firewall is in mode 1, right? > And to think a bit further, when someone begins to develop an addon or > core function to create rules > for CUSTOMFORWARD with a webgui, is this sufficient for creating a > INCOMING Firewall?! (I know its FORWARD-Chain) > But i hope you understand what i mean. Those chains have been introduced with the OpenVPN addon. It was intended to build in-tunnel filtering, but that has never been implemented. If you would like to implement filtering for VPN tunnels, please use those chains. Don't put anything into CUSTOM* because these are for rules that are manually created by the user. OVPNINPUT and OVPNFORWARD work in exactly the same way. Same for IPSECINPUT and IPSECFORWARD. > >> It would be great if one can say: > >> Hey, VPN1 is only allowed to connect to my internal servers 192.168.0.2 > >> and 192.168.0.3 via RDP (3389) > >> ans that via gui > > You can use the outgoing firewall to limit some sorts of traffic, but > > you cannot block incoming packets with it. > > > >> I already developed addons for ipcop, but ipfire seems complete different... > > No, the web UI is pretty much the same (crap). The firewall scripts do > > not differ too much, either. > Well the way ipfire is compiled and the way addons are created is much > more complicated at a first sight. Indeed, there is a detailed guide how to start on our wiki. http://wiki.ipfire.org/en/development/build > If i would understand how to add changes to the ipfire, maybe i would > begin to develop some sort of > gui for creating some firewall-rules. > I think it is not so difficult, because it just takes a textfile for the > rules, and a table in webinterface where the rule positions can be > changed and created. And a funvtion, that reads the rules on every reboot. > > Do you agree so far?!! Yes, that's the way. Maybe it is a good idea to integrate that as native as possible into the WUI, because there already too many possibilities how to add firewall rules (portfw, xtaccess, outgoing firewall,...). Michael

1 0

Firewall Question
by Alexander Marx 13 Oct '12

13 Oct '12

Dear developers. Are there any plans to implement the possibillity to create firewall rules for openvpn subnets? Actually all vpn connections are able to do anything in the remotenetwork The only solution is to put own iptables rule in the /etc/sysconfig/firewall.local I already tried to play with the OVPNFORWARD Chain but had no luck. It would be great if one can say: Hey, VPN1 is only allowed to connect to my internal servers 192.168.0.2 and 192.168.0.3 via RDP (3389) ans that via gui I already developed addons for ipcop, but ipfire seems complete different... Greetings Al

2 1

Translation updates
by Michael Tremer 09 Oct '12

09 Oct '12

Hello, as of today, there are two new language teams working on translating the software of the IPFire project. The new languages are: Khmer (Cambodia) https://www.transifex.com/projects/p/ipfire/language/km_KH/ Catalan https://www.transifex.com/projects/p/ipfire/language/ca/ I am very happy that so many people are joining the translation project and help IPFire to make its way into the world. Despite the language teams, that have just started their work, there is plenty of work to do on other languages as well. If you speak one of those languages, please join. https://www.transifex.com/projects/p/ipfire/ Michael

1 0

New tool - pyPDNS
by Stefan Schantl 02 Oct '12

02 Oct '12

Hello, today I want to introduce you to pyPDNS. I is designed as an administration tool for the authoritative DNS server from PowerDNS, and is completely written in Python. When development has been finished, it's goal will be to get, add / remove or to edit zones and their records directly on the PDNS sqlite3 database backend. It will be possible to use it as a command line interface or by import it into other python applications like the web interface of IPFire 3. I've just created the git repository and pushed it on our git server, so the development process is an an very early state and a lot of important functions are still missing. At the moment it is only possible to use the API and the CLI to get the configured zones and records. If you are interested on these tool, you can get the source code here: http://git.ipfire.org/?p=people/stevee/pypdns.git;a=summary

2 2

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

Development