It is never too late to post your ideas. Maybe we consider them good enough to be put into an up2date, and at the least we will make a mental note for the next version.
My feature wish list is quite short, since ASL already includes most of the features that I would like to have. But there are still a few things missing.
1. NTP server. At the moment, ASL has the NTP client, but is not designed to relay time information, since the server portion is missing.
2. IMAP proxy. At the moment, ASL includes POP3 and SMTP proxies, but the IMAP mail proxy is missing, leaving a spam and virus security hole for clients that use IMAP mail connections.
3. Novell eDirectory tie-in. At the moment ASL supports LDAP and RADIUS connections to an external directory service, but this is an armslength approach. If an ASL box could be directly connected to a Novell NDS tree, and appear in a Novell Console1 view of the tree, then Novell's user base could far more readily implement ASL firewalls.
4. Load balanced connections. At the moment ASL works with single physical connections for each logical network. The inclusion of a multi-NIC meta driver would allow for teamed, redundant, load balanced connections on both the LAN and the WAN side of the ASL firewall.
My feature wish list is quite short, since ASL already includes most of the features that I would like to have. But there are still a few things missing.
1. NTP server. At the moment, ASL has the NTP client, but is not designed to relay time information, since the server portion is missing.
2. IMAP proxy. At the moment, ASL includes POP3 and SMTP proxies, but the IMAP mail proxy is missing, leaving a spam and virus security hole for clients that use IMAP mail connections.
3. Novell eDirectory tie-in. At the moment ASL supports LDAP and RADIUS connections to an external directory service, but this is an armslength approach. If an ASL box could be directly connected to a Novell NDS tree, and appear in a Novell Console1 view of the tree, then Novell's user base could far more readily implement ASL firewalls.
4. Load balanced connections. At the moment ASL works with single physical connections for each logical network. The inclusion of a multi-NIC meta driver would allow for teamed, redundant, load balanced connections on both the LAN and the WAN side of the ASL firewall.
2. IMAP proxy. At the moment, ASL includes POP3 and SMTP proxies, but the IMAP mail proxy is missing, leaving a spam and virus security hole for clients that use IMAP mail connections.
hmm talking about proxies, I have another request :-) yes you guys are going to hate me.
if possible I'd like to see multi level pattern backups, so say if the patterns that got updated fail this time they either load the ones from an hour+ ago or even the day before the failed pattern that way the proxy doesn't run on completely dead pattern files so the protection is semi there still...
[ QUOTE ] hmm talking about proxies, I have another request :-) yes you guys are going to hate me.
if possible I'd like to see multi level pattern backups, so say if the patterns that got updated fail this time they either load the ones from an hour+ ago or even the day before the failed pattern that way the proxy doesn't run on completely dead pattern files so the protection is semi there still...
[/ QUOTE ]
great idea!! also a button on every menu for backup. so that one becomes able only to backup the definitions if needed and so on. or a drop down menu in backup section.