firestarter-user — Mailing list for anything Firestarter related

Re: [Firestarter-user] Config

[Randy <the...@gm...>]

I use to use firestarter clear back in debian sarge.  I went to Anro's 
Iptables Firewall Script when it got unmanageable. With Arno's you only 
have to edit a single config file and start it and you are good-to-go.  There 
is a simple setup dialog, in debian anyway, that takes most of the hard 
work out of it unless you need something special.  Still the config is pretty 
much self explanatory and easy to understand.

Arno is very prompt at trying to help you get it working the way you want if 
you don't understand the config file.  Once the config is set it starts at 
boot and unless your network changes your good.  You can also write 
custom rules for real unique situations.

On the down side there is no gui, but once arno's is setup annd running 
there is no need of it. If you are interested in where your traffic is going 
you might take a look at etherape.

On Sunday, May 31, 2015 01:54:59 PM Robert M. Riches Jr. wrote:
> Has shorewall improved in any big ways since several years ago?
> 
> Some years ago, I investigated shorewall as an alternative to the
> then-dying firewall configuration tool, named something similar
> to guarddog.  My findings at the time were that shorewall was a
> very thin shim around iptables, so it had very little advantage
> over just writing iptables rules manually.  However, shorewall
> set up a tangled web of interwoven chains/tables that made it
> almost impossible to comprehend, especially without a GUI.  IIRC,
> I switched to FireStarter at that time and for those reasons.
> 
> Thanks,
> 
> Robert
> 
> > From: Yusuf Kemal Tengirsek <kte...@gm...>
> > Date: Sun, 31 May 2015 16:48:27 +0200
> > To: "fir...@li..."
> > 
> > 	<fir...@li...>
> > 
> > Thanks a lot, I will try.
> > 
> > YKT
> > 
> > > Le 31 May 2015 à 16:23, J.O. Aho <tr...@in...> a écrit :
> > >> On 31/05/15 15:51, Yusuf Kemal Tengirsek wrote:
> > >> Hi everybody,
> > >> 
> > >> Any suggestion of alternatives ?
> > > 
> > > I have switched to shorewall, no GUI in default, but that works fine 
for
> > > me as I don't need to change that much nowadays.
> > > 
> > > http://www.shorewall.net
> > 
> > --------------------------------------------------------------------------
> > ---- _______________________________________________
> > Firestarter-user mailing list
> > To unsubscribe, visit
> > https://lists.sourceforge.net/lists/listinfo/firestarter-user
> ----------------------------------------------------------------------------
> -- _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/firestarter-user

-- 
If it ain't broke tweek it

Re: [Firestarter-user] Config

[<rm....@ja...>]

Has shorewall improved in any big ways since several years ago?

Some years ago, I investigated shorewall as an alternative to the
then-dying firewall configuration tool, named something similar
to guarddog.  My findings at the time were that shorewall was a
very thin shim around iptables, so it had very little advantage
over just writing iptables rules manually.  However, shorewall
set up a tangled web of interwoven chains/tables that made it
almost impossible to comprehend, especially without a GUI.  IIRC,
I switched to FireStarter at that time and for those reasons.

Thanks,

Robert


> From: Yusuf Kemal Tengirsek <kte...@gm...>
> Date: Sun, 31 May 2015 16:48:27 +0200
> To: "fir...@li..."
> 	<fir...@li...>
>
> Thanks a lot, I will try.
>
> YKT
>
>
>
>
>
> > Le 31 May 2015 à 16:23, J.O. Aho <tr...@in...> a écrit :
> > 
> >> On 31/05/15 15:51, Yusuf Kemal Tengirsek wrote:
> >> Hi everybody,
> >> 
> >> Any suggestion of alternatives ?
> > 
> > I have switched to shorewall, no GUI in default, but that works fine for 
> > me as I don't need to change that much nowadays.
> > 
> > http://www.shorewall.net
> > 
> > 
> > -- 
> >      //Aho
> > 
> > 
> > ------------------------------------------------------------------------------
> > _______________________________________________
> > Firestarter-user mailing list
> > To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user

Re: [Firestarter-user] Config

[Yusuf K. T. <kte...@gm...>]

Thanks a lot, I will try.

YKT





> Le 31 May 2015 à 16:23, J.O. Aho <tr...@in...> a écrit :
> 
>> On 31/05/15 15:51, Yusuf Kemal Tengirsek wrote:
>> Hi everybody,
>> 
>> Any suggestion of alternatives ?
> 
> I have switched to shorewall, no GUI in default, but that works fine for 
> me as I don't need to change that much nowadays.
> 
> http://www.shorewall.net
> 
> 
> -- 
>      //Aho
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user

Re: [Firestarter-user] Config

[J.O. A. <tr...@in...>]

On 31/05/15 15:51, Yusuf Kemal Tengirsek wrote:
> Hi everybody,
>
> Any suggestion of alternatives ?

I have switched to shorewall, no GUI in default, but that works fine for 
me as I don't need to change that much nowadays.

http://www.shorewall.net


-- 
      //Aho

Re: [Firestarter-user] Config

[Yusuf K. T. <kte...@gm...>]

Hi everybody,

Any suggestion of alternatives ?
Thanks in advance and best regards...

YKT



> Le 31 May 2015 à 11:43, J.O. Aho <tr...@in...> a écrit :
> 
> On 30/05/15 13:56, Genghis Khan wrote:
> 
> 
>>> You do realise, I assume, that development and maintenance of
>>> firestarter, ended some years ago, and, whilst it was a good
>>> application, and (I believe) many still use it, it is obsolete?
>> Aside you, me and others are subscribed to this mailing list, despite
>> the maintenance of Firestarter has ended, why do you ask this question?
> 
> 
> If you don't know how to tweak and fix things, firestarter will not be 
> as effective as you may think it is.
> 
> 
>> I think, since system tray deprecation is imminent, there are more
>> chances for someone to step up and readapt and optimize the code of
>> Firestarter to the new desktop environments.
> 
> I doubt that, I know how many efforts has been made to fork this project 
> and all have failed, I think we will get more questions about why they 
> can't see the tray icon anymore.
> 
> 
>> Pointing out that the maintenance of Firestarter has ended, while not
>> even discussing or suggesting on a way to continue its development,
>> would not do any good, by my opinion.
> 
> No, but it may get someone to look for an alternative. It's time to move 
> ahead for people, sure some old legacy system may be running firestarter 
> but a uptodate or fresh install should not.
> 
> 
> -- 
>      //Aho
> 
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user

Re: [Firestarter-user] Config

[J.O. A. <tr...@in...>]

On 30/05/15 13:56, Genghis Khan wrote:


>> You do realise, I assume, that development and maintenance of
>> firestarter, ended some years ago, and, whilst it was a good
>> application, and (I believe) many still use it, it is obsolete?
>>
> Aside you, me and others are subscribed to this mailing list, despite
> the maintenance of Firestarter has ended, why do you ask this question?


If you don't know how to tweak and fix things, firestarter will not be 
as effective as you may think it is.


> I think, since system tray deprecation is imminent, there are more
> chances for someone to step up and readapt and optimize the code of
> Firestarter to the new desktop environments.

I doubt that, I know how many efforts has been made to fork this project 
and all have failed, I think we will get more questions about why they 
can't see the tray icon anymore.


> Pointing out that the maintenance of Firestarter has ended, while not
> even discussing or suggesting on a way to continue its development,
> would not do any good, by my opinion.

No, but it may get someone to look for an alternative. It's time to move 
ahead for people, sure some old legacy system may be running firestarter 
but a uptodate or fresh install should not.


-- 
      //Aho

Re: [Firestarter-user] Config

[Genghis K. <gen...@gm...>]

Hello Bret,

On Sat, 30 May 2015 14:40:09 +0800
Bret Busby <bre...@gm...> wrote:

> On 30/05/2015, Erik Svensson <zek...@gm...> wrote:
> > Hi!
> >
> > I've been using firestarter for several years on my debian testing
> > computer.
> > Today when I was about to check if i could open a port I got the
> > setup wizard instead of my configuration of the fire wall.
> > Just to be shure I checked my firewall against grc.com to see if the
> > firewall was still activ, and the result was as expected "stelth".
> >
> > Current version on debian testing is 1.0.3-11
> >
> > How do I get firestarter to read my configuration again.
> >
> > Where is the config file located, and has it been changed in
> > location or formate in the last year or two?
> >
> > Regards Erik
> >
> > --
> > Cattle die, kinsmen die, thyself too soon must die,
> >      but one thing never, I ween, will die,
> >         fair fame of one who has earned.   "Havamal"
> >
> >
> 
> 
> Hello.
> 
> You do realise, I assume, that development and maintenance of
> firestarter, ended some years ago, and, whilst it was a good
> application, and (I believe) many still use it, it is obsolete?
> 

Aside you, me and others are subscribed to this mailing list, despite
the maintenance of Firestarter has ended, why do you ask this question?

I think, since system tray deprecation is imminent, there are more
chances for someone to step up and readapt and optimize the code of
Firestarter to the new desktop environments.

Pointing out that the maintenance of Firestarter has ended, while not
even discussing or suggesting on a way to continue its development,
would not do any good, by my opinion.

-- 
Ekiga 5.0 - The Next Big Thing
http://www.ekiga.org/news/2015-03-08/ekiga-5.0-next-big-thing

Ekiga 5 – Progress Report
http://blog.ekiga.net/?p=201

Are you interested in helping?
Ekiga needs you!

Re: [Firestarter-user] Config

[Bret B. <bre...@gm...>]

On 30/05/2015, Erik Svensson <zek...@gm...> wrote:
> Hi!
>
> I've been using firestarter for several years on my debian testing
> computer.
> Today when I was about to check if i could open a port I got the setup
> wizard instead of my configuration of the fire wall.
> Just to be shure I checked my firewall against grc.com to see if the
> firewall was still activ, and the result was as expected "stelth".
>
> Current version on debian testing is 1.0.3-11
>
> How do I get firestarter to read my configuration again.
>
> Where is the config file located, and has it been changed in location or
> formate in the last year or two?
>
> Regards Erik
>
> --
> Cattle die, kinsmen die, thyself too soon must die,
>      but one thing never, I ween, will die,
>         fair fame of one who has earned.   "Havamal"
>
>


Hello.

You do realise, I assume, that development and maintenance of
firestarter, ended some years ago, and, whilst it was a good
application, and (I believe) many still use it, it is obsolete?

-- 
Bret Busby
Armadale
West Australia
..............

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

....................................................

Re: [Firestarter-user] Config

[Dan Y. <da...@pr...>]

Erik,

I use centos & my config files are in /etc/firestarter
Maybe you are missing or have corrupt file?

Dan


On 5/29/2015 5:10 PM, Erik Svensson wrote:
> Hi!
>
> I've been using firestarter for several years on my debian testing computer.
> Today when I was about to check if i could open a port I got the setup
> wizard instead of my configuration of the fire wall.
> Just to be shure I checked my firewall against grc.com to see if the
> firewall was still activ, and the result was as expected "stelth".
>
> Current version on debian testing is 1.0.3-11
>
> How do I get firestarter to read my configuration again.
>
> Where is the config file located, and has it been changed in location or
> formate in the last year or two?
>
> Regards Erik
>

-- 
ProWeb Associates, Inc. <http://www.ProWebAssociates.com>
Phone: 717-207-7125

[Firestarter-user] Config

[Erik S. <zek...@gm...>]

Hi!

I've been using firestarter for several years on my debian testing computer.
Today when I was about to check if i could open a port I got the setup
wizard instead of my configuration of the fire wall.
Just to be shure I checked my firewall against grc.com to see if the
firewall was still activ, and the result was as expected "stelth".

Current version on debian testing is 1.0.3-11

How do I get firestarter to read my configuration again.

Where is the config file located, and has it been changed in location or
formate in the last year or two?

Regards Erik

-- 
Cattle die, kinsmen die, thyself too soon must die,
     but one thing never, I ween, will die,
        fair fame of one who has earned.   "Havamal"

Re: [Firestarter-user] Couldn't the development restart again?

[J.O. A. <tr...@in...>]

On 26/03/14 14:04, Franklin Wang wrote:

> The firestarter is still popular now, and the commands of
> netfilter/iptables aren't easy for many
>

Take a look at nftables instead, simpler than iptables, this requires 
kernel 3.13 or later.


-- 
      //Aho

  ------------------------------------------------------------------------
   E-Mail: tr...@in...                   URL: http://www.kotiaho.net/
      ICQ: 13696780                                         Skype: jo_aho
   System: Linux System                        (PPC7447/1000 AMD K8/2500)
  ------------------------------------------------------------------------
             EU forbids you to send spam without my permission
  ------------------------------------------------------------------------

Re: [Firestarter-user] Couldn't the development restart again?

[Robert J. <bob...@ya...>]

That would be nice in my opinion.  I'm no programmer, but might be willing to give it a shot.

Bob




________________________________
 From: Franklin Wang <fra...@y7...>
To: fir...@li... 
Sent: Wednesday, 26 March 2014, 9:04
Subject: [Firestarter-user] Couldn't the development restart again?
 

Hi all,

The firestarter is still popular now, and the commands of
netfilter/iptables aren't easy for many

-- 
skype:touch21st, Gtalk:touch21st, Yahoo/MSN:fra...@ya...,
Xing/Linkedin:Franklin Wang


------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Firestarter-user mailing list
To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user

[Firestarter-user] Couldn't the development restart again?

[Franklin W. <fra...@y7...>]

Hi all,

The firestarter is still popular now, and the commands of
netfilter/iptables aren't easy for many

-- 
skype:touch21st, Gtalk:touch21st, Yahoo/MSN:fra...@ya...,
Xing/Linkedin:Franklin Wang

Re: [Firestarter-user] requesting needed security features

[Spud <spu...@gm...>]

Sounds like a cracking idea, I hope its successful.

On 24 December 2012 20:39, J.O. Aho <tr...@in...> wrote:

> On 30/10/12 01:50, Object Constant wrote:
> > Yeah, I've been on this list for years I think. It got lively lately it
> > seems.
> >
> > Firestarter is an awesome program. I think there really should be more
> > GUI type interfaces like this!!
> >
> > This is definite an area that is sorely lacking.
>
> I think we will see some changes now with firewalld, which will allow
> none-privileged users to alter firewall rules by "talking" with a daemon
> which then applies the rule.
>
> What is needed is a good GUI for that which allows users to apply rules
> simply without knowing how iptables works.
>
> --
>
>   //Aho
>
>
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/firestarter-user
>



-- 
db

It denos't mtater waht oredr the ltteers in a wrod are, it's olny iprmoatnt
taht the frist and lsat ltteer be at the rghit pclae.The rset can be a
total mses and you can sitll raed it wouthit porbelm.Tihs is bcuseae the
huamn mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe.

Re: [Firestarter-user] requesting needed security features

[J.O. A. <tr...@in...>]

On 30/10/12 01:50, Object Constant wrote:
> Yeah, I've been on this list for years I think. It got lively lately it
> seems.
>
> Firestarter is an awesome program. I think there really should be more
> GUI type interfaces like this!!
>
> This is definite an area that is sorely lacking.

I think we will see some changes now with firewalld, which will allow 
none-privileged users to alter firewall rules by "talking" with a daemon 
which then applies the rule.

What is needed is a good GUI for that which allows users to apply rules 
simply without knowing how iptables works.

-- 

  //Aho

Re: [Firestarter-user] requesting needed security features

[Object C. <obj...@gm...>]

Yeah, I've been on this list for years I think. It got lively lately it
seems.

Firestarter is an awesome program. I think there really should be more GUI
type interfaces like this!!

This is definite an area that is sorely lacking.

Shame I'm not a coder. :s


anyways, Firestarter Rocks. Hope someone picks it up.

On Mon, Oct 29, 2012 at 7:39 PM, Steven Shmuel Protter <
hpu...@ya...> wrote:

> You can make all the feature requests you want. It has been YEARS since
> anyone updated this excellent program.
>
> Kind of sad, I used it for years to build custom router boxes with very
> flexible firewalls.
>
> Steven "Shmuel" Protter
> Unix/Linux Systems Administrator
> HP-UX Certified Systems Administrator (CSA) 00011170719
> Red Hat Certified Engineer (RHCE) 804006331322056
> #1 Contributor HP ITRC Forums http://forums.itrc.hp.com
>
> CV:
> http://www.hpuxconsulting.com/CV/resume.shmuel.protter.pdf
> http://www.hpuxconsulting.com/CV/resume.shmuel.protter.doc
>
>
> Owner:
> http://www.isnamerica.com
> http://www.hpuxconsulting.com
>
>
> Privacy notice: The contents of this electronic communication (email)
> contain private information intended for the recipient only. This includes
> but is not limited to email address and unlisted telephone number. This
> private information is covered by US and Israeli privacy and anti spam
> laws. Transfer or sale to third parties without my written consent is a
> violation of existing statute and will be referred to appropriate
> authorities for remedial action. If you received this email in error,
> please delete it and if you wish make ISN Corporation aware of the error.
>
>   ------------------------------
> *From:* teique <te...@gm...>
> *To:* fir...@li...
> *Sent:* Monday, October 29, 2012 3:12 PM
> *Subject:* [Firestarter-user] requesting needed security features
>
> hi!
>
> (is this the right place to ask for them?) Here:
>
> 1) require super user password to STOP firewall (preventing miss "in a
> hurry" clicking)
>
> 2) option to forbid STOPping firewall in preferences (to change
> preferences will request su pw)
>
> 3) shortcut to LOCK firewall (Ctrl+L ?) (and place the lock far from
> stop button)
>
> 4) auto-append EVENTS to a file (I need to know all blocked attempts,
> but to have to save them manually is complicated;
>
> 5) deactivateable POLICIES (rules) without removing them from the list,
> so we can reactivate later;
> also, add a comment column, so I can put the name/ID/machineID of the
> person I added the rule to...
>
> 6) request su pw to change/apply firewall POLICIES (rules)!
>
> 7) log (appending to a file) all ACCEPTED connections, and how long they
> were active; currently they disappear a bit after disconnection, so I
> cant track what is happening...
>
> PS.: I know we already run it as root, but, the point is it is a
> monitoring application that is running all the time; so to re-request
> the su pw, is important to me.
>
> thx!
>
> my 1st post: FireStarter ROCKS! thx! xD
>
>
>
> ------------------------------------------------------------------------------
> The Windows 8 Center - In partnership with Sourceforge
> Your idea - your app - 30 days.
> Get started!
> http://windows8center.sourceforge.net/
> what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/firestarter-user
>
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_sfd2d_oct
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/firestarter-user
>
>

Re: [Firestarter-user] requesting needed security features

[Steven S. P. <hpu...@ya...>]

You can make all the feature requests you want. It has been YEARS since anyone updated this excellent program.

Kind of sad, I used it for years to build custom router boxes with very flexible firewalls.
 
Steven "Shmuel" Protter
Unix/Linux Systems Administrator
HP-UX Certified Systems Administrator (CSA) 00011170719
Red Hat Certified Engineer (RHCE) 804006331322056
#1 Contributor HP ITRC Forums http://forums.itrc.hp.com


CV:
http://www.hpuxconsulting.com/CV/resume.shmuel.protter.pdf 
http://www.hpuxconsulting.com/CV/resume.shmuel.protter.doc


Owner:
http://www.isnamerica.com
http://www.hpuxconsulting.com


Privacy notice: The contents of this electronic communication (email) contain private information intended for the recipient only. This includes but is not limited to email address and unlisted telephone number. This private information is covered by US and Israeli privacy and anti spam laws. Transfer or sale to third parties without my written consent is a violation of existing statute and will be referred to appropriate authorities for remedial action. If you received this email in error, please delete it and if you wish make ISN Corporation aware of the error.



________________________________
 From: teique <te...@gm...>
To: fir...@li... 
Sent: Monday, October 29, 2012 3:12 PM
Subject: [Firestarter-user] requesting needed security features
 
hi!

(is this the right place to ask for them?) Here:

1) require super user password to STOP firewall (preventing miss "in a 
hurry" clicking)

2) option to forbid STOPping firewall in preferences (to change 
preferences will request su pw)

3) shortcut to LOCK firewall (Ctrl+L ?) (and place the lock far from 
stop button)

4) auto-append EVENTS to a file (I need to know all blocked attempts, 
but to have to save them manually is complicated;

5) deactivateable POLICIES (rules) without removing them from the list, 
so we can reactivate later;
also, add a comment column, so I can put the name/ID/machineID of the 
person I added the rule to...

6) request su pw to change/apply firewall POLICIES (rules)!

7) log (appending to a file) all ACCEPTED connections, and how long they 
were active; currently they disappear a bit after disconnection, so I 
cant track what is happening...

PS.: I know we already run it as root, but, the point is it is a 
monitoring application that is running all the time; so to re-request 
the su pw, is important to me.

thx!

my 1st post: FireStarter ROCKS! thx! xD


------------------------------------------------------------------------------
The Windows 8 Center - In partnership with Sourceforge
Your idea - your app - 30 days.
Get started!
http://windows8center.sourceforge.net/
what-html-developers-need-to-know-about-coding-windows-8-metro-style-apps/
_______________________________________________
Firestarter-user mailing list
To unsubscribe, visit https://lists.sourceforge.net/lists/listinfo/firestarter-user

[Firestarter-user] requesting needed security features

[teique <te...@gm...>]

hi!

(is this the right place to ask for them?) Here:

1) require super user password to STOP firewall (preventing miss "in a 
hurry" clicking)

2) option to forbid STOPping firewall in preferences (to change 
preferences will request su pw)

3) shortcut to LOCK firewall (Ctrl+L ?) (and place the lock far from 
stop button)

4) auto-append EVENTS to a file (I need to know all blocked attempts, 
but to have to save them manually is complicated;

5) deactivateable POLICIES (rules) without removing them from the list, 
so we can reactivate later;
also, add a comment column, so I can put the name/ID/machineID of the 
person I added the rule to...

6) request su pw to change/apply firewall POLICIES (rules)!

7) log (appending to a file) all ACCEPTED connections, and how long they 
were active; currently they disappear a bit after disconnection, so I 
cant track what is happening...

PS.: I know we already run it as root, but, the point is it is a 
monitoring application that is running all the time; so to re-request 
the su pw, is important to me.

thx!

my 1st post: FireStarter ROCKS! thx! xD

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[<rm....@ja...>]

> Date: Sun, 28 Oct 2012 13:14:50 +0800
> From: Bret Busby <bre...@gm...>
> To: fir...@li...
>
> On 28/10/2012, Robert M. Riches Jr. <rm....@ja...> wrote:
>
> <snip>
>
> >
> > (Not attempting to speak for the OP, just for myself...)
> >
>
> What is "OP" ?

"OP" means "Original Poster" or "Original Posting".

Robert

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[Spud <spu...@gm...>]

This has been brought up a few times over the past few years and nothing
ever becomes of it.

Although I'm all for trying again as it is/was a fantastic idea that aloud
someone with no idea like myself to setup a complete working firewall.

On 28 October 2012 20:10, Bret Busby <bre...@gm...> wrote:

> On 28/10/2012, J.O. Aho <tr...@in...> wrote:
> > On 28/10/12 06:14, Bret Busby wrote:
> >> On 28/10/2012, Robert M. Riches Jr. <rm....@ja...> wrote:
> >
> >>> I suggest you swap and use iptables. Firestarter has been dead and
> >>> unmaintained for years.
> >
> > David, Firestarter does use iptables, it's true that it's been
> > maintained for years and Tomas been missing for long time, but still I
> > think the Ubuntians makes some updates to make the GUI to build and
> > change the blocked ip-ranges. This keeps it to work as it is, no new
> > features or so, but it's a "simple" iptables rule write for those who
> > don't have the skill to make their own rules.
> >
> >
>
> What is the prospect of someone sufficiently capable (I know that I am
> not capable), taking over the project, so as to revive  Firestarter?
>
>
> --
> Bret Busby
> Armadale
> West Australia
> ..............
>
> "So once you do know what the question actually is,
>  you'll know what the answer means."
> - Deep Thought,
>  Chapter 28 of Book 1 of
>  "The Hitchhiker's Guide to the Galaxy:
>  A Trilogy In Four Parts",
>  written by Douglas Adams,
>  published by Pan Books, 1992
>
> ....................................................
>
>
> ------------------------------------------------------------------------------
> WINDOWS 8 is here.
> Millions of people.  Your app in 30 days.
> Visit The Windows 8 Center at Sourceforge for all your go to resources.
> http://windows8center.sourceforge.net/
> join-generation-app-and-make-money-coding-fast/
> _______________________________________________
> Firestarter-user mailing list
> To unsubscribe, visit
> https://lists.sourceforge.net/lists/listinfo/firestarter-user
>



-- 
db

It denos't mtater waht oredr the ltteers in a wrod are, it's olny iprmoatnt
taht the frist and lsat ltteer be at the rghit pclae.The rset can be a
total mses and you can sitll raed it wouthit porbelm.Tihs is bcuseae the
huamn mnid deos not raed ervey lteter by istlef, but the wrod as a wlohe.

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[Bret B. <bre...@gm...>]

On 28/10/2012, J.O. Aho <tr...@in...> wrote:
> On 28/10/12 06:14, Bret Busby wrote:
>> On 28/10/2012, Robert M. Riches Jr. <rm....@ja...> wrote:
>
>>> I suggest you swap and use iptables. Firestarter has been dead and
>>> unmaintained for years.
>
> David, Firestarter does use iptables, it's true that it's been
> maintained for years and Tomas been missing for long time, but still I
> think the Ubuntians makes some updates to make the GUI to build and
> change the blocked ip-ranges. This keeps it to work as it is, no new
> features or so, but it's a "simple" iptables rule write for those who
> don't have the skill to make their own rules.
>
>

What is the prospect of someone sufficiently capable (I know that I am
not capable), taking over the project, so as to revive  Firestarter?


-- 
Bret Busby
Armadale
West Australia
..............

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

....................................................

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN

[Balasubramaniam N. <bal...@gm...>]

On Sun, Oct 28, 2012 at 1:58 PM, <
fir...@li...> wrote:

>
>
> Message: 2
> Date: Sat, 27 Oct 2012 12:33:29 +0100
> From: Mike Edwards <mi...@ch...>
> Subject: [Firestarter-user] Help Understanding Why Firestarter is
>         blocking y VPN connection to Hidemyass Proxy VPN server!
> To: fir...@li...
> Message-ID: <508...@ch...>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Hi, I just started using the web proxy service Hidemyass with my Ubuntu
> 12.04 box. I have set up the vpn connection in "Network Connections",
> however, I only get a successful connection if I stop the firewall with
> Firestarter. I have read lots and lots of forum threads and tried lots
> of different settings but every time I start the firewall the connection
> drops and every time I stop the firewall it works! I just can't find
> accessible information regarding how to set-up Firestarter to let the
> vpn connection through.
>
> My current set-up in Firestarter is:
>
> In the "Policy" tab > "Inbound traffic policy" > "Allow connections from
> host" > [my vpn IP address]
>
> In the "Policy" tab > "Inbound traffic policy":
>
> Allow service: unknown
> Port: 1723
> For: my vpn IP address]
> In /etc/firestarter/user-pre (i.e., $ sudo gedit
> /etc/firestarter/user-pre) I am using the following settings.
>
>   # Forward PPTP VPN client traffic
> $IPT -A FORWARD -i $IF -o $INIF -p tcp --dport 1723 -m state --state
> NEW,ESTABLISHED,RELATED -j ACCEPT
> $IPT -A FORWARD -i $IF -o $INIF -p 47 -m state --state
> NEW,ESTABLISHED,RELATED -j ACCEPT
> $IPT -A FORWARD -i $INIF -o $IF -p 47 -m state --state
> NEW,ESTABLISHED,RELATED -j ACCEPT
>
> I'm really stuck with this. Any help would be really appreciated.
>
>
>
>

Mike could you post the output of # iptables -L  and $ ifconfig ?

-- 
Regards,
Balasubramaniam Natarajan
www.etutorshop.com/moodle/

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[J.O. A. <tr...@in...>]

On 28/10/12 06:14, Bret Busby wrote:
> On 28/10/2012, Robert M. Riches Jr. <rm....@ja...> wrote:

>> I suggest you swap and use iptables. Firestarter has been dead and unmaintained for years.

David, Firestarter does use iptables, it's true that it's been 
maintained for years and Tomas been missing for long time, but still I 
think the Ubuntians makes some updates to make the GUI to build and 
change the blocked ip-ranges. This keeps it to work as it is, no new 
features or so, but it's a "simple" iptables rule write for those who 
don't have the skill to make their own rules.


>> (Not attempting to speak for the OP, just for myself...)
>>
>
> What is "OP" ?

Bert: Original Poster, in this case it would be Mike.


-- 
      //Aho

  ------------------------------------------------------------------------
   E-Mail: tr...@in...                   URL: http://www.kotiaho.net/
      ICQ: 13696780                                         Skype: jo_aho
   System: Linux System                        (PPC7447/1000 AMD K8/2500)
  ------------------------------------------------------------------------
             EU forbids you to send spam without my permission
  ------------------------------------------------------------------------

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[Bret B. <bre...@gm...>]

On 28/10/2012, Robert M. Riches Jr. <rm....@ja...> wrote:

<snip>

>
> (Not attempting to speak for the OP, just for myself...)
>

What is "OP" ?


-- 
Bret Busby
Armadale
West Australia
..............

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

....................................................

Re: [Firestarter-user] Help Understanding Why Firestarter is blocking y VPN connection to Hidemyass Proxy VPN server!

[<rm....@ja...>]

> From: David Cottle <web...@au...>
> Date: Sat, 27 Oct 2012 05:08:42 -0700
> To: "fir...@li..."
> 	<fir...@li...>
>
> I suggest you swap and use iptables. Firestarter has been dead and
> unmaintained for years. Fedora dropped it back in the FC12 days. I don't
> understand why Ubuntu still package a dead project.

(Not attempting to speak for the OP, just for myself...)

Being as firestarter is simply the frontend, and firestarter uses
iptables as the backend, it would be more of a matter of dropping
firestarter and using only raw iptables.  It doesn't make sense
to speak of switching from firestarter to iptables, because the
two have different roles in the process.  While it is possible to
use raw iptables, that would be very tedious to say the least.  A
user-friendly frontend is a great help.

Once upon a time, there was guarddog.  Then, there was
firestarter.  I haven't heard of anything to replace firestarter.
Maybe, that might be why Ubuntu is still packaging it.

For myself, I made a tarball of the firestarter stuff, in /etc
IIRC, and just untar that onto any new installation and make
modifications by hand to the firestarter files.

Cheers,

Robert