2003-12-06 23:11:59 UTC
Hi,
First of all great work with FirePoint!
The only thing with Fwbuilder\Firepoint is the installing of new rules.
Installing itself works fine but because of
setting all Chains default policy to DROP
IPTABLES -P OUTPUT DROP
IPTABLES -P INPUT DROP
IPTABLES -P FORWARD DROP
and then flushing all old rules kills all connections on the
firewall.
Another solution would be do compare/diff the old ruleset with the
new one and only clear the changes an replace them. This would also
be very secure and not harm the connections on the firewall.
So only particular changed rules could be cleared and the
installation would work exactly like fw-1s.
I think this could be done with some changes to policy compiler /
.fw output and the fwb_install script.