This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

whitch features do you miss in astaro firewall?

I would need:

- a second http proxy (reverse proxy to use for dmz)

- a pop3 proxy to use for external pop3 clients

- the possibility to change the proxy cache sizes in the web interface or the possibility to disable the cache

- silent services (i don't want that an port-scan show that the smtp proxy is exim)

- and maybe "how to" samples in the manual

what do you need?

This thread was automatically locked due to age.

Parents

0 TeMpL over 23 years ago

rules based one dinamic-(name resolution)...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 TeMpL over 23 years ago

rules based one dinamic-(name resolution)...
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Simon Shaw over 23 years ago in reply to TeMpL

A fully configurable BIND !
Cancel
Vote Up 0 Vote Down

Cancel
0 DanielC over 23 years ago in reply to Simon Shaw

A POP3 virus-scanner
Extended logging for virus messages
Cancel
Vote Up 0 Vote Down

Cancel
0 Micah Lloyd over 23 years ago in reply to Bob M

I'd like to get an Intrusion Detection System automatically configured (snort!).
Cancel
Vote Up 0 Vote Down

Cancel
0 smgg12345 over 23 years ago in reply to DanielC

NNTP (NEWS) white/black lists.
Cancel
Vote Up 0 Vote Down

Cancel
0 Bob M over 23 years ago in reply to smgg12345

SSH Tunneling support built in rather than hacked in.

Next I have to figure out how to tunnel PPTP through SSH. I have been told it works....
Cancel
Vote Up 0 Vote Down

Cancel
0 jabberwocky over 23 years ago in reply to Micah Lloyd

Uh, isn't it better to have the IDS running on a different machine anyway?
Cancel
Vote Up 0 Vote Down

Cancel
0 Biffa over 23 years ago in reply to jabberwocky

Originally posted by jabberwocky:
You obviouslly missed my earlier post on that subject. I don't run proxies on any of my firewalls. Just the filter. As few exploitable services as possible.
So why bother running Astaro at all
surely a nice clean boot floppy BSD firewall running IPFilter would do?

That and having the IDS running on a system with no TCP stack bound to it is more low profile and probably much more successful anyway
Don't get me wrong, I agree with you, in some situations, but here we are talking about the Astaro firewall which has all those features I mentioned I was just trying to keep the conversation in context. No offence intended [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 Biffa over 23 years ago in reply to jabberwocky

Originally posted by jabberwocky:
Uh, isn't it better to have the IDS running on a different machine anyway?
Heh, on that basis, isn't it better to have:

DNS proxy
SMTP proxy
HTTP proxy

Running on a separate machine as well?

I think if we trust to run these on our firewall then an IDS would do well as the FW is the point of entry in most cases and an alert system would be most appreciated by most of the admins.

You can of course run an IDS on a separate machine as well ;-)
Cancel
Vote Up 0 Vote Down

Cancel
0 jabberwocky over 23 years ago in reply to Biffa

You obviouslly missed my earlier post on that subject. I don't run proxies on any of my firewalls. Just the filter. As few exploitable services as possible.

That and having the IDS running on a system with no TCP stack bound to it is more low profile and probably much more successful anyway
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 23 years ago in reply to Biffa

i need an Agent for RSA - ACE/Server for authentication on the whole system and specially on proxy-services. its possible to do with radius but it would be better and more comfortably to do without radius.
Cancel
Vote Up 0 Vote Down

Cancel