Re: [Fwknop-discuss] extending the iptables rules being executed

[Sean G. <sea...@gm...>]

Hi there everyone

I have updated the fwknopclient gui and added a few functional changes.

The GUI now supports the storage of targets in an XML database.  and
supports multiple access ports in access mode.  It also supports command
mode thanks to a request from Marius.

Major Bugfix:
There was a bug in the pkcs #5 routines where any payload which was not a
multiple of 48 bytes was not being accepted by fwknopd.  It appears that the
standard payload with one access-mode port is 96 bytes (150 bytes total
packet size), however when the payload was 112 or 128, it was being seen as
an invalid SPA packet on the fwknopd side.  As it turns out, after many
hours of kicking myself, it is not a good idea to always chop off the last
two bytes of a base64 encoded string, because it isn't always '=='.

Anyhow, I would appreciate any feedback.  I am aware of one small bug, and
that is that when the actions.db and targets.db files do not exist, the
program throws an exception.  I will fix this, however it isn't fatal,  The
targets.db contains two test destinations, with a username of test and an ip
address of 1.1.1.1 . Just change it to what ever your destination is.

The Pass-Phrase  is not stored in the database.  For now this is
intentional, as  doing so  would kind of nullify the usefulness of the
application.  However if anyone has any ideas how to secure the passwords
safely locally, please let me know.

Anyway, any feedback in this regards would be appreciated.

Here is the link to the executable,

http://www.cipherdyne.org/fwknop/download/fwknop-client-1.8.3-alpha.zip<http://wmail.sita.co.za/exchweb/bin/redir.asp?URL=http://www.cipherdyne.org/fwknop/download/fwknop-client-1.8.3-alpha.zip>

And the source
http://www.cipherdyne.org/fwknop/download/fwknop-client-1.8.3-alpha-src.zip<http://wmail.sita.co.za/exchweb/bin/redir.asp?URL=http://www.cipherdyne.org/fwknop/download/fwknop-client-1.8.3-alpha.zip>



Regards Sean