Re: [Fwbuilder-discussion] double administrtion

[<va...@vk...>]

On Aug 16, 2006, at 7:51 AM, Ethy H. Brito wrote:

> On Wed, 16 Aug 2006 11:30:27 +0000
> Erich Titl <eri...@th...> wrote:
>>
>> If you browse the archives for 'management interface' you will  
>> find an
>> answer by Vadim, stating what exactly the management interface does.
>
> Hi Erich and All
>
> Ok. Is there any intelligent way of doing this?
>
> I could not find in lists.sourceforge.net a friendly way of  
> filtering only
> messages containing 'management interface' inside. I think I am not  
> knowing to
> to deal with their user interface.

I do not quite understand what exactly you want to do. You seem to be  
mentioning two aspects of this:

  - can two people manage the firewall ?

the answer is yes. Built-in policy installer asks for the user name  
and password to authenticate to the firewall. Two people running the  
GUI and _different_ times can enter the same user name, provided both  
know password. The user name is not necessarily root, see web site  
for explanation how this can be done with a regular user account. If  
these two people run fwbuilder on different machines, you have to  
deal with a difficult problem of synchronizing their .fwb files.


- can two interfaces be marked as management ?

This would not be useful. Fwbuilder looks for the management  
interface of the firewall to decide what IP address it should talk to  
while installing the policy. If you mark two interfaces as  
"management", it will pick one and there is no guarantees as to which  
one. You can always override this by providing an alternative IP  
address for installer in its setup dialog.

--vk