|| ||christiaan <christiaan.theron-AT-virgin.net>|
|| ||"letters-AT-lwn.net" <letters-AT-lwn.net>|
|| ||The gift of volunteering|
|| ||Fri, 27 May 2005 21:04:30 +0100|
I have been using windows for a number of years and am certified in
system administration. However when I became unemployed I thought this
was an opportunity to research Linux to see what I could use it for and
gain some skills to try to re-enter the labour market.
I needed to start gently with a GUI distro and found IPCop. I was
pleasantly surprised at how useful it is and the quality of the addons
and documentation. However having never been involved in the Open Source
community I did not really know what to expect in terms of support and
contribution to the community.
I continued to explore the Open Source community through IPCop and found
something quite unexpected. By reading the docmentation manuals and
implementing the services of the distro I really began to get an
appreciation of the high standard and professionalism of the work
countless volunteers had put in and this helped me develop an
understanding of what the Open Source community is really all about.
It was at this stage I noticed that a section of the documentation had
not be written up and when I enquired with the community what was
happening with it, I was invited by the Lead Documentation volunteer to
contribute. While still a Linux novice I thought that this would be an
ideal opportunity to learn more about the VPN features.
Through this activity I was able to learn more about system
administration than I did through certification because I found it an
enjoyable form of edu-tainment. I became introduced to other projects
and their developers from different parts of europe. I now regulary
beta test new versions of TauVPN and Linsys, which are Open Source
windows IPSec clients. I enjoyed this so much that I volunteered to
write up a how-to for TauVPN.
After responding to questions on the IPCop forums I noticed that users
were posting queries related to issues arising when using more than one
firewall and were trying to find firewalling technologies that were
complimentary to their IPCop or existing Router.
I started to explore other firewall distributions and firewall
technologies. I had become a CCNA in february of this year and this gave
me an understanding of switching and bridging so I was very interested
when I came across Linux bridging firewall technology. I signed up to
the ebtables mailing list and established that a Linux bridging firewall
can be very effective against attacks when configured without an IP
address. When further combined with an Intrusion Prevention System such
as snort-inline it can detect attacks and prevent them.
Having discovered this technology and how useful it would be to
compliment an existing firewall/router. I then went about researching
an easy to use GUI distro with these features and found distros for
nearly everything but no bridging firewall IPS distro. If anyone knows
of an easy to use GUI bridging firewall distro that I can install on a
older computer then I would appreciate details on it.
If there is none I would be interested in collaborating with
other volunteers in the development of an easy to use bridging firewall.
Comments (2 posted)
|| ||Leon Brooks <leon-AT-cyberknights.com.au>|
|| ||Forbes Letters to the Editor <readers-AT-forbes.com>|
|| ||Letter to the Editor: Setback for Linux|
|| ||Fri, 27 May 2005 00:24:13 +0800|
|| ||Daniel Lyons <dlyons-AT-forbes.com>,
Forbes' website's feedback form gives no indication of a successful
submission, so... you all have my permission to publish this:
Daniel Lyons seems to be in the habit of being late, and dead wrong.
Here, the kernel developers (and specifically Linus) developed a
replacement tool in a matter of days or weeks, which is more closely
tailored to their way of doing things and therefore - at least in
principle - going to be even more effective than BK at maintaining
Linux's pace and security.
To the delight of many of the kernel hackers and onlookers, Linux is now
both ahead of the game and free of any proprietary encumbrances.
Daniel must have a deep-seated misunderstanding of how Open Source works
or is carrying a chip on his shoulder if he can spin that rather
excellent news to be somehow negative. And it seems to have taken him
more than a month to do it.
Perhaps he can do a story on how it took Microsoft years longer than
Linux to run reliably 64 bits wide on AMD's chips? I'd be interested to
see how long it takes him find a negative in that for Linux. It's an
odd spectator sport, I admit, but harmless and predictable.
Perth, Western Australia
http://cyberknights.com.au/ Modern tools; traditional dedication
http://plug.linux.org.au/ Member, Perth Linux User Group
http://slpwa.asn.au/ Member, Linux Professionals WA
http://osia.net.au/ Member, Open Source Industry Australia
http://linux.org.au/ Member, Linux Australia
Comments (none posted)
Page editor: Jonathan Corbet