RE: [Fwbuilder-discussion] WIN32 & SNMP

[Andy H. <an...@ha...>]

OK, Vadim, thanks.

It wasn't obvious, so I also tried installing the Windows version of
Net-snmp wondering whether this could be what FWbuilder was looking for,
although did wonder why it didn't use the native Microsoft stuff (one =
could
be forgiven for not using anything Microsoft to do with networking :-) )
Now I know.

I have also been trying out various Linux and BSD platforms for the
management workstation.

I noticed that you are doing commercial licensing for the Windows and =
PIX
versions, which seem reasonable considering time saved.  Are you =
intending
to do commercial versions of the Linux and BSD ones also?  e.g. have =
open
source and commercial?    I don't have a problem with a reasonable =
license
cost, BTW.....

For the workstation platform, I've just been trying Mandrake Linux 10.1 =
and
so far all seems well with that with FWbuilder.

For the firewall platform, I've used FreeBSD 4.x for a number of years =
and
am pretty happy with it.   I did consider one of the minimal Linux
distributions for firewalls, which seem a good idea in principle except =
that
I generally need to add some items, and then it seems more practical to =
go
with something more mainstream.

For the latest firewall, I am using FreeBSD 5.3 with Net-snmp 5.21.    =
I've
found a problem using this with FWBuilder, but am pretty certain that it
isn't your issue.   That is that when defining a new firewall and doing =
the
SNMP check for interfaces, FWBuilder complains in the diagnostic window =
that
it can't get ifPhysAddr from the target.    I separately did an SNMPwalk
from another machine, and the target, although it does respond to a =
request
for interface parameters, leaves out these specific ones and so =
FWbuilder
doesn't do anything with the rest of the information.     I have a =
feeling
that this may be to do with the interfacing of Net-snmp into the kernel =
but
I am not certain.   It's also present on 4.x builds of FreeBSD as far as =
I
can tell.

For the moment, I can fill in the interface addresses and details =
manually,
although since I have tunnels there are likely to be quite a few.   Is =
there
anything that FWbuilder needs to know about MAC addresses to achieve?   =
I
should add that I am using PF on the FreeBSD box.

Finally, many thanks for a really useful tool.    Have you given any =
thought
to doing something with access lists and CBAC for Cisco IOS?

.andy




=20

>-----Original Message-----
>From: fwb...@li...=20
>[mailto:fwb...@li...] On=20
>Behalf Of Vadim Kurland /r/
>Sent: 28 March 2005 05:58
>To: Andy Hall
>Cc: fwb...@li...
>Subject: Re: [Fwbuilder-discussion] WIN32 & SNMP
>
>
>Andy,
>
>SNMP functions have not been ported to Windows version yet.
>The manual is indeed for the older version, however general=20
>principles it explains have not changed so it is still=20
>applicable. The main menu and dialogs have changed though, I=20
>am planning to update the manual to reflect this.
>
>--vk
>
>
>On Mar 27, 2005, at 2:48 PM, Andy Hall wrote:
>
>>
>> I have been trying out the Win32 build of FWbuilder 2.6 on WindowsXP=20
>> and have noticed two issues.
>> =A0
>> 1)  Unfortunately, in the window used to add a firewall, the SNMP=20
>> discovery functionality is greyed out and doesn't work.
>> It does seem to work OK with Linux and BSD ports.....
>> =A0
>> 2) The PDF user guide documentation seems to refer to a different
>> (older) version of the software.=A0=A0=A0 Is there one which relates =
to=20
>> 2.0.x?
>> =A0
>> thanks
>> =A0
>> =A0
>
>
>-------------------------------------------------------
>SF email is sponsored by - The IT Product Guide Read honest &=20
>candid reviews on hundreds of IT Products from real users.
>Discover which products truly live up to the hype. Start reading now.
>http://ads.osdn.com/?ad_ide95&alloc_id=14396&op=3Dick
>_______________________________________________
>Fwbuilder-discussion mailing list
>Fwb...@li...
>https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
>