Share

Firepoint Firewall Management Server

The forum address has changed, you have been automatically redirected. Please update any bookmarks to use the new URL.

Subscribe

Incremental Install???

You are viewing a single message from this topic. View all messages.

  1. nobody

    2003-12-06 23:11:59 UTC
    Hi,

    First of all great work with FirePoint!

    The only thing with Fwbuilder\Firepoint is the installing of new rules.
    Installing itself works fine but because of
    setting all Chains default policy to DROP

    IPTABLES -P OUTPUT DROP
    IPTABLES -P INPUT DROP
    IPTABLES -P FORWARD DROP

    and then flushing all old rules kills all connections on the
    firewall.

    Another solution would be do compare/diff the old ruleset with the
    new one and only clear the changes an replace them. This would also
    be very secure and not harm the connections on the firewall.
    So only particular changed rules could be cleared and the
    installation would work exactly like fw-1s.

    I think this could be done with some changes to policy compiler /
    .fw output and the fwb_install script.
< Previous | 1 | Next >

Add a Reply

You can use Markdown syntax in your reply.

Preview

Monitor this

Log in to monitor this topic. Not registered? Create an account to receive email updates when replies are posted to this topic. If you do not log in or register, your reply will be added anonymously.