|
|
Log in / Subscribe / Register

The gift of volunteering

From:  christiaan <christiaan.theron-AT-virgin.net>
To:  "letters-AT-lwn.net" <letters-AT-lwn.net>
Subject:  The gift of volunteering
Date:  Fri, 27 May 2005 21:04:30 +0100

Dear Editor
 
I have been using windows for a number of years and am certified in
system administration. However when I became unemployed I thought this
was an opportunity to research Linux to see what I could use it for and
gain some skills to try to re-enter the labour market.
I needed to start gently with a GUI distro and found IPCop. I was
pleasantly surprised at how useful it is and the quality of the addons
and documentation. However having never been involved in the Open Source
community I did not really know what to expect in terms of support and
contribution to the community.
I continued to explore the Open Source community through IPCop and found
something quite unexpected. By reading the docmentation manuals and
implementing the services of the distro I really began to get an
appreciation of the high standard and professionalism of the work
countless volunteers had put in and this helped me develop an
understanding of what the Open Source community is really all about.
It was at this stage I noticed that a section of the documentation had
not be written up and when I enquired with the community what was
happening with it, I was invited by the Lead Documentation volunteer to
contribute. While still a Linux novice I thought that this would be an
ideal opportunity to learn more about the VPN features.
Through this activity I was able to learn more about system
administration than I did through certification because I found it an
enjoyable form of edu-tainment. I became introduced to other projects
and their developers from different parts of europe. I now regulary
beta test new versions of TauVPN and Linsys, which are Open Source
windows IPSec clients. I enjoyed this so much that I volunteered to
write up a how-to for TauVPN.
After responding to questions on the IPCop forums I noticed that users
were posting queries related to issues arising when using more than one
firewall and were trying to find firewalling technologies that were
complimentary to their IPCop or existing Router.
I started to explore other firewall distributions and firewall
technologies. I had become a CCNA in february of this year and this gave
me an understanding of switching and bridging so I was very interested
when I came across Linux bridging firewall technology. I signed up to
the ebtables mailing list and established that a Linux bridging firewall
can be very effective against attacks when configured without an IP
address. When further combined with an Intrusion Prevention System such
as snort-inline it can detect attacks and prevent them.
Having discovered this technology and how useful it would be to
compliment an existing firewall/router. I then went about researching
an easy to use GUI distro with these features and found distros for
nearly everything but no bridging firewall IPS distro. If anyone knows
of an easy to use GUI bridging firewall distro that I can install on a
older computer then I would appreciate details on it.
 
If there is none I would be interested in collaborating with
other volunteers in the development of an easy to use bridging firewall.
 
Christiaan Theron
christiaan@wonderport.com
 
 
 
 
 
 


to post comments

The gift of volunteering

Posted Jun 9, 2005 11:59 UTC (Thu) by dmaxwell (guest, #14010) [Link]

I use SentryCD because I too needed to turn older machines into bridging firewalls. You can find that here:

http://www.sentryfirewall.com/

SentryCD does nothing to automate the setup of a bridging firewall. What it DOES do is make it easy for you to add bridging scripts to the boot process. It is also a natural fit with the fwbuilder firewall ruleset GUI. I have one script to setup the bridge and a iptables script generated by fwbuilder. It did take me a while to initially set all of this up but it is dead easy to maintain. SentryCD supports booting from a CD and reading the config from a USB drive. I have some nice hard driveless firewalls now.

The gift of volunteering

Posted Jun 10, 2005 0:51 UTC (Fri) by barrygould (guest, #4774) [Link]

Astaro Security Linux does include snort-inline.
However, it is only free (as in beer) for home use.

Their GUI, etc. are proprietary, closed-source.

Nonetheless, we are quite happy with it at home, and at work (with a license).


Copyright © 2005, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds