This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

whitch features do you miss in astaro firewall?

I would need:

- a second http proxy (reverse proxy to use for dmz)

- a pop3 proxy to use for external pop3 clients

- the possibility to change the proxy cache sizes in the web interface or the possibility to disable the cache

- silent services (i don't want that an port-scan show that the smtp proxy is exim)

- and maybe "how to" samples in the manual

what do you need?

This thread was automatically locked due to age.

Parents

0 TeMpL over 23 years ago

rules based one dinamic-(name resolution)...
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 23 years ago in reply to TeMpL

A fully configurable BIND !
Cancel
Vote Up 0 Vote Down

Cancel
0 Michel Barthelemy over 23 years ago in reply to blue_01

What I would need is H323 protocol support.
Cancel
Vote Up 0 Vote Down

Cancel
0 damiri_01 over 23 years ago in reply to Michel Barthelemy

Features I need is:

- limiting bandwidth based on IP address and protocol
- QoS based on IP address and protocol
- support for sync card such as sangoma and cyclades
- possibility to flush a proxy caches
- SPARC version (why not)

for now it's enough ..

damiri
Cancel
Vote Up 0 Vote Down

Cancel
0 mbeaver over 23 years ago in reply to damiri_01

I would like to see NAT-t (transversal) for IPSEC.

Beaver
Cancel
Vote Up 0 Vote Down

Cancel
0 HJBehrens over 23 years ago in reply to mbeaver

What I need is,

more flexible usage of virtual IP addresses for using with the internal smtp proxy and VPN.
Cancel
Vote Up 0 Vote Down

Cancel
0 Arne Fischer over 23 years ago in reply to HJBehrens

I read a lot about wanted proxies, what's about implementing generic proxies??

OK, maybe a little bit to much professionality and the end of a cheap and easy firewall ... but everyone can design his own proxies he want's [;)]

Regards

Arne
Cancel
Vote Up 0 Vote Down

Cancel
0 ECKEROTH over 23 years ago in reply to Arne Fischer

Need more information from ASTARO, about what to come in the furure, next release dates and so on...

:/
Cancel
Vote Up 0 Vote Down

Cancel
0 KKnecht over 23 years ago in reply to ECKEROTH

Customers (or possible ones) asking for:

POP3 virus scanning
HTTP virus scanning

ASL is really growing GREAT
Cancel
Vote Up 0 Vote Down

Cancel
0 notoriousiroc over 23 years ago in reply to KKnecht

I like the ideas of Snort, POP3, and HTTP virus scanning, I would also like to see connection teaming re-enabled. When I try to configure it manually just like any other *NIX box using the IP command it gives me an error. This worked perfectly on 2.X, but 3.X does not like if for some reason. Other than that, Thank you for the nice product. [:)]

notoriousiroc [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 notoriousiroc over 23 years ago in reply to notoriousiroc

One other nice feature would be the ability to monitor the firewall using SNMP. How about ICSA certification? That would easily bring in more customers and make the current ones feel more secure. (By the way, the HTTP proxy is vulnerable to chunking attacks....) Thank you.

notoriousiroc [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 firebear_01 over 23 years ago in reply to notoriousiroc

Hey all,
when i read all the wanted features here, if astaro gets to realize them all its time to make an Home-Edition different from the professional Version. POP3-Server, SNMP, DHCP-Server if ASTARO realize this (i know DHCP-Server is already realized) please give a way to push the Deamons out of the Firewall, maybe in installation give a choice to install or not the deamons. Our IT-Security Engineer wants to kick of ASL if this all comes real.

firebear
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 firebear_01 over 23 years ago in reply to notoriousiroc

Hey all,
when i read all the wanted features here, if astaro gets to realize them all its time to make an Home-Edition different from the professional Version. POP3-Server, SNMP, DHCP-Server if ASTARO realize this (i know DHCP-Server is already realized) please give a way to push the Deamons out of the Firewall, maybe in installation give a choice to install or not the deamons. Our IT-Security Engineer wants to kick of ASL if this all comes real.

firebear
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 firebear_01 over 23 years ago in reply to firebear_01

Hey all,
when i read all the wanted features here, if astaro gets to realize them all its time to make an Home-Edition different from the professional Version. POP3-Server, SNMP, DHCP-Server if ASTARO realize this (i know DHCP-Server is already realized) please give a way to push the Deamons out of the Firewall, maybe in installation give a choice to install or not the deamons. Our IT-Security Engineer wants to kick of ASL if this all comes real.

firebear
Cancel
Vote Up 0 Vote Down

Cancel
0 ljorg over 23 years ago in reply to firebear_01

I would like the SNAT/DNAT-rules to be able to specify a destination group instead of just one IP.

That way, I can do load balancing. And if one of my web servers die, Astaro can route the request to another one.

My current setup has web servers in two different physical locations. I would be extremely nice, if the Astaro could reroute DNAT's to the same interface they came in from.

It would be nice if Astaro could do health checks of a server, specified by the user. For a web server, it could try to do an http get request. If it fails, mark the server as failed and route all requests to another server in the group.

If this feature was in Astaro, I wouldn't need to spend too damn much money on a Layer 7 switch.
Cancel
Vote Up 0 Vote Down

Cancel
0 KKnecht over 23 years ago in reply to ljorg

In one point i agree with firebear:

It's a FIREWALL we're talking about and not a
"Eierlegende Wollmilchsau" (sorry, only know the German version)

Regards, Karste
Cancel
Vote Up 0 Vote Down

Cancel
0 blue_01 over 23 years ago in reply to KKnecht

i need a sorted SMTP mail relay queue

in a home network it doesn't matter
but if you have much mail users...
Cancel
Vote Up 0 Vote Down

Cancel
0 Darryl Smith over 23 years ago in reply to blue_01

The one feature I need is the High Availability running sharing an interface - such as the DMZ or PRIVATE interface.

I have the machines for this. I just need to software support. And the software is basically there - just a few mods needed

Darryl
Cancel
Vote Up 0 Vote Down

Cancel
0 rogerhafner over 23 years ago in reply to Darryl Smith

I would Need

a option in the Backup, Menu to make a Backup to local Floppy Drive Weekly or Daily.
Cancel
Vote Up 0 Vote Down

Cancel
0 blue_01 over 23 years ago in reply to rogerhafner

i would like to have the possibility to filter
mails with added apple files (type and creator code)
Cancel
Vote Up 0 Vote Down

Cancel
0 redcap over 23 years ago in reply to blue_01

I would very much appreciate Upnp support.

http://www.upnp.org
http://sourceforge.net/projects/linux-igd/
http://upnp.sourceforge.net/
Cancel
Vote Up 0 Vote Down

Cancel
0 bbb_01 over 23 years ago in reply to redcap

Hallo,

-missing IP-Assignment for dynamic IPSEC-VPN Clients so Rules could be created for each client.
(Cisco and Symantec do that with IP-Pools)
-NAT-T.
-Viruswall Features. (HTTP/FTP/POP3)
-QOS inside VPN-Tunnels. [:)] )))
(Like Checkpoints Floodgate option)
-IDS if possible.

Bernd
Cancel
Vote Up 0 Vote Down

Cancel
0 Dycell over 23 years ago in reply to bbb_01

I would just like the limitation in karacters (no - ) voor eth alliases removed so i can try astaro. Isp gives me an ip based on dchp-alias (CO12345-A)
Cancel
Vote Up 0 Vote Down

Cancel