summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-sysadm/2010-November/000520.html
diff options
context:
space:
mode:
Diffstat (limited to 'zarb-ml/mageia-sysadm/2010-November/000520.html')
-rw-r--r--zarb-ml/mageia-sysadm/2010-November/000520.html112
1 files changed, 112 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2010-November/000520.html b/zarb-ml/mageia-sysadm/2010-November/000520.html
new file mode 100644
index 000000000..0851b2fec
--- /dev/null
+++ b/zarb-ml/mageia-sysadm/2010-November/000520.html
@@ -0,0 +1,112 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-sysadm] Installing firewall
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Installing%20firewall&In-Reply-To=%3C1289603075.6417.84.camel%40localhost%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="000515.html">
+ <LINK REL="Next" HREF="000522.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-sysadm] Installing firewall</H1>
+ <B>Eric Elena</B>
+ <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20Installing%20firewall&In-Reply-To=%3C1289603075.6417.84.camel%40localhost%3E"
+ TITLE="[Mageia-sysadm] Installing firewall">eric.elena at telecom-paristech.org
+ </A><BR>
+ <I>Sat Nov 13 00:04:35 CET 2010</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="000515.html">[Mageia-sysadm] Installing firewall
+</A></li>
+ <LI>Next message: <A HREF="000522.html">[Mageia-sysadm] Installing firewall
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#520">[ date ]</a>
+ <a href="thread.html#520">[ thread ]</a>
+ <a href="subject.html#520">[ subject ]</a>
+ <a href="author.html#520">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>Le vendredi 12 novembre 2010 &#224; 23:05 +0100, Olivier Thauvin a &#233;crit :
+&gt;<i> * nicolas vigier (<A HREF="https://www.mageia.org/mailman/listinfo/mageia-sysadm">boklm at mars-attacks.org</A>) wrote:
+</I>&gt;<i> &gt; Hello,
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; The Mageia packages repository will be stored on valstar. As the
+</I>&gt;<i> &gt; repository will be needed on build nodes, it will have to be either
+</I>&gt;<i> &gt; mirrored or mounted via nfs (readonly). If we use nfs, I think we should
+</I>&gt;<i> &gt; first setup a firewall before installing the nfs server. A firewall
+</I>&gt;<i> &gt; would also be useful to filter connections to the pgsql/mysql servers,
+</I>&gt;<i> &gt; to the build nodes, etc ...
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; I suggest using shorewall to manage the firewall configuration. Any
+</I>&gt;<i> &gt; comment about this ?
+</I>&gt;<i>
+</I>&gt;<i> I saw you mostly wrote the shorewall, however, I don't like myself
+</I>&gt;<i> shroewall. Shorewall is nothing more than a set of scripts over iptables
+</I>&gt;<i> and I think it add a useless complexity over this last one.
+</I>&gt;<i>
+</I>&gt;<i> I widelly prefer to use directly iptables. I believe we are experienced
+</I>&gt;<i> enough to write iptables rules ourself.
+</I>&gt;<i>
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; I plan to write a shorewall module in puppet, test it on jonund first,
+</I>&gt;<i> &gt; without installing shorewall (only writting the config files), then
+</I>&gt;<i> &gt; install shorewall on jonund, and if we didn't lose access to jonund
+</I>&gt;<i> &gt; install it on other nodes.
+</I>&gt;<i>
+</I>&gt;<i> Playing with firewall on computer we can access only by network, woot !
+</I>
+It's safe to play with a remote firewall ... as long as you don't forget
+to add a cron job to disable the firewall in case of trouble :) Even if
+there is something wrong with the configuration, downtime will be just a
+few minutes.
+There is also the tmux (screen) solution: create a new window, sleep XX
+&amp;&amp; disable firewall. But I don't think tmux is shipped by default.
+
+My 10 KRW,
+
+Eric
+
+&gt;<i> I think access control can be done w/o using iptables.
+</I>&gt;<i>
+</I>&gt;<i> My 2 cents.
+</I>&gt;<i>
+</I>&gt;<i> &gt;
+</I>&gt;<i> &gt; Nicolas
+</I>
+
+
+</PRE>
+
+
+
+
+
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="000515.html">[Mageia-sysadm] Installing firewall
+</A></li>
+ <LI>Next message: <A HREF="000522.html">[Mageia-sysadm] Installing firewall
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#520">[ date ]</a>
+ <a href="thread.html#520">[ thread ]</a>
+ <a href="subject.html#520">[ subject ]</a>
+ <a href="author.html#520">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm
+mailing list</a><br>
+</body></html>