tag:old.nabble.com,2006:forum-3513 2009-12-14T20:58:07Z Object-oriented GUI and set of compilers for various firewall platforms. Currently implemented compilers for iptables, ipfilter, OpenBSD pf, ipfw and Cisco PIX Firewall Builder home is <a href="http://sourceforge.net/projects/fwbuilder/" target="_top" rel="nofollow">here</a>. tag:old.nabble.com,2006:post-26789558 2009-12-14T20:58:07Z 2009-12-14T20:58:07Z Vadim Kurland ✎ few new features and some bug fixes in this build:<div><br></div><div> - Added a place in the global Preferences dialog for options specific for different object types. First parameters include options for DNSName and</div> <div>AddressTable to let the user decide if the newly created objects of these types should be automatically configured with &quot;Compile Time&quot; or &quot;Run Time&quot; mode. </div><div><br></div><div> - Also, added an option that makes DNSName object editor copy the name of the object into the DNS record input field when new object is created or whenever the name changes.  This is useful when the user does not want to keep object name and dns record different because they need to enter the name only once.</div> <div><br></div><div> - generated iptables script can now include automatic rules to match IPv6 neighbor discovery ICMP6 packets. This is controlled by a checkbox in the iptables &quot;advanced&quot; settings dialog and is off by default.</div> <div><br></div><div> - shell functions in the generated iptbales script should not be empty because some shells do not like that (bash does not mind, but busybox and some other shells do not accept this)</div><div><br></div> <div><br></div><div>Reminder:  generated script is now assembled from blocks that come from the files that I call &quot;configlets&quot;. Configlets that come with the package are installed in  /usr/share/fwbuilder-3.1.0/configlets on Linux. You can create directory &quot;fwbuilder/configlets&quot;  in your home  and copy files that come with the package to it and then edit them. Just maintain directory structure, such as for the general Linux platform place your modified configlets in $HOME/fwbuilder/configlets/linux24/   You can copy just one configlet, you do not need to copy all of them.  This allows you to modify generated script without touching C++ code. Whenever the package is reinstalled, your modified configlets are not going to be wiped out and replaced because they are stored in your home directory.</div> <div><br></div><div>Configlets support primitive macro language with just two constructs:</div><div><br></div><div>{{$variable}} for variable substitution and </div><div><br></div><div>{{if  variable}}    some code  {{endif}}   for conditionals</div> <div><br></div><div>I feel this is very powerful mechanism because it allows you to make changes without having to wait for us to turn around and release new version of fwbuilder to fix a bug or make an improvement.</div> <div><br></div><div>--vk</div><div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789558&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26789338 2009-12-14T20:27:27Z 2009-12-14T20:27:27Z Vadim Kurland ✎ <div><br></div>thanks, this is good information.<div><br></div><div>Firewall Builder is not intended to generate configuration for vrrpd or other daemons that provide HA service. The goal of fwbuilder is to generate firewall configuration for the HA cluster. The code is based on the code that was contributed to the project by folks from Secunet Security Networks AG but was generalized quite a bit since their implementation only supported VRRP in a specific configuration. Actually the notion of VRRP requiring vrrp interfaces comes from them and I just did  not question or verify it. Fwbuilder does not expect vrrp interfaces when failover protocol is set to &quot;heartbeat&quot; or &quot;OpenAIS&quot; which is the case Juan has.</div> <div><br></div><div>I think I should try to configure a couple of vmware virtual machines to actually try this hands on. It would help me a lot if you guys could send me some working configs for different variants of HA configurations. </div> <div><br></div><div>Thanks</div><div>--vk</div><div><br><br></div><div><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 8:18 PM, John Gallagher <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=0" target="_top" rel="nofollow">john@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div lang="EN-US" link="blue" vlink="purple"> <div> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Keepalived manages both VRRP and IPVS config.  It works great and is not that difficult to configure.  </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">I manage  4 different locations that have over 200,000 connections per hour and have never had a issue.  We have had third party companies do stress testing of the load balancer and failover functionality.  They opened some 5000 http connections a second to the website while we unplugged cables and pulled power cords.  They hardly saw anything as the VIP addresses moved to the failover server and then back to the primary system when it came back on line.  </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Stateful applications will also failover however they will die if they transition multiple times in a short period of time.  We felt this was likely caused by iptables and not related to the vrrp as we never had issues with stateless connections. </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">The heartbeat  is the vrrp multicast from the active Lb to the network.  </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Then health checker scripts allow you to test external applications.</span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">john</span></p> <p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p> <div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in"> <p class="MsoNormal"><b><span style="font-size:10.0pt">From:</span></b><span style="font-size:10.0pt"> Juan Pablo Villa [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=1" target="_top" rel="nofollow">jpvilla@...</a>] <br> <b>Sent:</b> Monday, December 14, 2009 4:38 PM<br> <b>To:</b> Vadim Kurland<br> <b>Cc:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=2" target="_top" rel="nofollow">fwbuilder-discussion@...</a><br> <b>Subject:</b> Re: [Fwbuilder-discussion] VRRP Cluster config</span></p> </div><div><div></div><div class="h5"> <p class="MsoNormal"> </p> <div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <p class="MsoNormal"> </p> <div> <p class="MsoNormal"> </p> </div> <p class="MsoNormal">Isn&#39;t protocol supported by keepalived  called &quot;heartbeat&quot; ? It is not VRRP I believe.</p> </blockquote> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">Keepalived has an option (-P) to use vrrp only. It works alike vrrpd, but from the manpage it seems to have less features<br>  </p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">anyway, If vrrpd can work in a way where it does not create vrrp interfaces (vrrp0, vrrp1 etc) but instead assigns alias IP addresses to existing physical interfaces, then this is similar to how heartbeat works. I am going to look into this, I suppose there should be an option to let fwbuilder known which way vrrpd is used. In any case, you just uncheck the checkbox &quot;Configure interfaces&quot; so it won&#39;t try to manage these interfaces.</p> </div> </blockquote> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">AFAIK there is no other option but to have it as an alias of an existing interface. When using vrrp implementations and versions I mentioned is just not possible. Dunno if another implementation let&#39;s you do it that way because when searching for it I couldn&#39;t find any other.<br>  </p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <p class="MsoNormal"> </p> <div> <p class="MsoNormal">meanwhile you can configure your failover groups in fwbuilder to use protocol &quot;None&quot;. </p> </div> </blockquote> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt">I tried before and I just realized that the compile errors I was getting were because I was not adding an IP address to each interface, just like vrrp. Solved!<br>  <br> Regards,<br> JP.-<br> <br> </p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <p class="MsoNormal"><span style="color:#888888"> </span></p> <div> <p class="MsoNormal"><span style="color:#888888">--vk</span></p> </div> <div> <div> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal"> </p> <div> <p class="MsoNormal">On Mon, Dec 14, 2009 at 3:58 PM, Juan Pablo Villa &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=3" target="_top" rel="nofollow">jpvilla@...</a>&gt; wrote:</p> <p class="MsoNormal">Sorry I wasn&#39;t clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don&#39;t know how to create them.<br> <br> Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can&#39;t get any new interfaces created on the system  (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br> For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br> <br> fwdebian1:~# ip addr list eth0<br> 2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>     inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br>        valid_lft forever preferred_lft forever<br> <br> fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br> <br> fwdebian1:~# ip addr list eth0<br> 2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>     inet <a href="http://10.78.78.10/32" target="_blank" rel="nofollow">10.78.78.10/32</a> scope global eth0<br>     inet6 fe80::200:5eff:fe00:132/64 scope link <br>        valid_lft forever preferred_lft forever<br> <br> I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn&#39;t work either. <br> <br> vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br> I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br> <br> Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br> Regards,<br> <span style="color:#888888">JP.-</span></p> <div> <div> <p class="MsoNormal" style="margin-bottom:12.0pt"> </p> <div> <p class="MsoNormal">On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=4" target="_top" rel="nofollow">vadim@...</a>&gt; wrote:</p> <p class="MsoNormal"><br> I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.</p> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</p> </div> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</p> </div> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</p> </div> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal">--vk</p> </div> <div> <p class="MsoNormal"> </p> </div> <div> <p class="MsoNormal"> </p> <div> <div> <div> <p class="MsoNormal">On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=5" target="_top" rel="nofollow">jpvilla@...</a>&gt; wrote:</p> </div> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> <p class="MsoNormal">Hi all, <br> <br> I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br> <br> I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br> I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br> <br> The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br> If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:</p> <p style="margin:0in;margin-bottom:.0001pt"># Interface vrrp0 does not exist</p> <p style="margin:0in;margin-bottom:.0001pt"> </p> <p class="MsoNormal" style="margin-bottom:12.0pt">To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)</p> <p style="margin:0in;margin-bottom:.0001pt">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin:0in;margin-bottom:.0001pt">/etc/fwdebian1.fw: line 331: `}&#39;</p> <p class="MsoNormal" style="margin-bottom:12.0pt"><br> line 329 verify_interfaces() {<br> line 330<br> line 331 }<br> <br> This also happens with other script options if you uncheck them.<br> <br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br> Regards,<br> <span style="color:#888888">JP.-<br> <br> </span></p> </div> </div> <p class="MsoNormal" style="margin-bottom:12.0pt">------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=6" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></p> </blockquote> </div> <p class="MsoNormal"> </p> </div> </div> <p class="MsoNormal"> </p> </div> </div> </div> <p class="MsoNormal"> </p> </div> </div> </div> </blockquote> </div> <p class="MsoNormal"> </p> </div></div></div> </div> </blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789338&i=7" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26789263 2009-12-14T20:18:36Z 2009-12-14T20:18:36Z John Gallagher-4 <html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=Content-Type content="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)"> <!--[if gte mso 9]><xml> <o:shapedefaults v:ext="edit" spidmax="1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext="edit"> <o:idmap v:ext="edit" data="1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>Keepalived manages both VRRP and IPVS config.&nbsp; It works great and is not that difficult to configure.&nbsp; <o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>I manage &nbsp;4 different locations that have over 200,000 connections per hour and have never had a issue.&nbsp; We have had third party companies do stress testing of the load balancer and failover functionality.&nbsp; They opened some 5000 http connections a second to the website while we unplugged cables and pulled power cords.&nbsp; They hardly saw anything as the VIP addresses moved to the failover server and then back to the primary system when it came back on line. &nbsp;<o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>Stateful applications will also failover however they will die if they transition multiple times in a short period of time.&nbsp; We felt this was likely caused by iptables and not related to the vrrp as we never had issues with stateless connections. <o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>The heartbeat &nbsp;is the vrrp multicast from the active Lb to the network.&nbsp; <o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>Then health checker scripts allow you to test external applications.<o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'>john<o:p></o:p></span></p> <p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"; color:#1F497D'><o:p>&nbsp;</o:p></span></p> <div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'> <p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Juan Pablo Villa [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=0" target="_top" rel="nofollow">jpvilla@...</a>] <br> <b>Sent:</b> Monday, December 14, 2009 4:38 PM<br> <b>To:</b> Vadim Kurland<br> <b>Cc:</b> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=1" target="_top" rel="nofollow">fwbuilder-discussion@...</a><br> <b>Subject:</b> Re: [Fwbuilder-discussion] VRRP Cluster config<o:p></o:p></span></p> </div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> <div> <blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt; margin-left:4.8pt;margin-right:0in'> <p class=MsoNormal><o:p>&nbsp;</o:p></p> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <p class=MsoNormal>Isn't protocol supported by keepalived &nbsp;called &quot;heartbeat&quot; ? It is not VRRP I believe.<o:p></o:p></p> </blockquote> <div> <p class=MsoNormal>&nbsp;<o:p></o:p></p> </div> <div> <p class=MsoNormal>Keepalived has an option (-P) to use vrrp only. It works alike vrrpd, but from the manpage it seems to have less features<br> &nbsp;<o:p></o:p></p> </div> <blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt; margin-left:4.8pt;margin-right:0in'> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal>anyway,&nbsp;If vrrpd can work in a way where it does not create vrrp interfaces (vrrp0, vrrp1 etc) but instead assigns alias IP addresses to existing physical interfaces, then this is similar to how heartbeat works. I am going to look into this, I suppose there should be an option to let fwbuilder known which way vrrpd is used. In any case, you just uncheck the checkbox &quot;Configure interfaces&quot; so it won't try to manage these interfaces.<o:p></o:p></p> </div> </blockquote> <div> <p class=MsoNormal>&nbsp;<o:p></o:p></p> </div> <div> <p class=MsoNormal>AFAIK there is no other option but to have it as an alias of an existing interface. When using vrrp implementations and versions I mentioned is just not possible. Dunno if another implementation let's you do it that way because when searching for it I couldn't find any other.<br> &nbsp;<o:p></o:p></p> </div> <blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt; margin-left:4.8pt;margin-right:0in'> <p class=MsoNormal><o:p>&nbsp;</o:p></p> <div> <p class=MsoNormal>meanwhile you can configure your failover groups in fwbuilder to use protocol &quot;None&quot;.&nbsp;<o:p></o:p></p> </div> </blockquote> <div> <p class=MsoNormal>&nbsp;<o:p></o:p></p> </div> <div> <p class=MsoNormal style='margin-bottom:12.0pt'>I tried before and I just realized that the compile errors I was getting were because I was not adding an IP address to each interface, just like vrrp. Solved!<br> &nbsp;<br> Regards,<br> JP.-<br> <br> <o:p></o:p></p> </div> <blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt; margin-left:4.8pt;margin-right:0in'> <p class=MsoNormal><span style='color:#888888'><o:p>&nbsp;</o:p></span></p> <div> <p class=MsoNormal><span style='color:#888888'>--vk<o:p></o:p></span></p> </div> <div> <div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> <div> <p class=MsoNormal>On Mon, Dec 14, 2009 at 3:58 PM, Juan Pablo Villa &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=2" target="_top" rel="nofollow">jpvilla@...</a>&gt; wrote:<o:p></o:p></p> <p class=MsoNormal>Sorry I wasn't clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don't know how to create them.<br> <br> Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can't get any new interfaces created on the system&nbsp; (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br> For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br> <br> fwdebian1:~# ip addr list eth0<br> 2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br> &nbsp;&nbsp;&nbsp; link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br> &nbsp;&nbsp;&nbsp; inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br> &nbsp;&nbsp;&nbsp; inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; valid_lft forever preferred_lft forever<br> <br> fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br> <br> fwdebian1:~# ip addr list eth0<br> 2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br> &nbsp;&nbsp;&nbsp; link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br> &nbsp;&nbsp;&nbsp; inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br> &nbsp;&nbsp;&nbsp; inet <a href="http://10.78.78.10/32" target="_blank" rel="nofollow">10.78.78.10/32</a> scope global eth0<br> &nbsp;&nbsp;&nbsp; inet6 fe80::200:5eff:fe00:132/64 scope link <br> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; valid_lft forever preferred_lft forever<br> <br> I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn't work either. <br> <br> vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br> I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br> <br> Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br> Regards,<br> <span style='color:#888888'>JP.-</span><o:p></o:p></p> <div> <div> <p class=MsoNormal style='margin-bottom:12.0pt'><o:p>&nbsp;</o:p></p> <div> <p class=MsoNormal>On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=3" target="_top" rel="nofollow">vadim@...</a>&gt; wrote:<o:p></o:p></p> <p class=MsoNormal><br> I'll fix the issue with empty functions. I create a bug for this and added you to Cc, you'll get email when this is fixed. Should be today.<o:p></o:p></p> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?<o:p></o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.<o:p></o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself. &nbsp;Script created by fwbuilder can assign ip address to vrrp interface though.<o:p></o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal>--vk<o:p></o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> <div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> <div> <div> <div> <p class=MsoNormal>On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=4" target="_top" rel="nofollow">jpvilla@...</a>&gt; wrote:<o:p></o:p></p> </div> </div> <blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt; margin-left:4.8pt;margin-right:0in'> <div> <div> <p class=MsoNormal>Hi all, <br> <br> I recently came across fwbuilder and right now I'm trying to set up a vrrp cluster on debian lenny. <br> <br> I'm a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I'm back, and just amazed with the fwbuilder goodies.<br> <br> I'm running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I'm stuck with the basic vrrp setup.<br> <br> The main problem that I'm having is that I don't have a vrrp0 interface on my firewalls. I have tried vrrpd&nbsp; (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br> If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<o:p></o:p></p> <p style='margin:0in;margin-bottom:.0001pt'># Interface vrrp0 does not exist<o:p></o:p></p> <p style='margin:0in;margin-bottom:.0001pt'><o:p>&nbsp;</o:p></p> <p class=MsoNormal style='margin-bottom:12.0pt'>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<o:p></o:p></p> <p style='margin:0in;margin-bottom:.0001pt'>/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}'<o:p></o:p></p> <p style='margin:0in;margin-bottom:.0001pt'>/etc/fwdebian1.fw: line 331: `}'<o:p></o:p></p> <p class=MsoNormal style='margin-bottom:12.0pt'><br> line 329 verify_interfaces() {<br> line 330<br> line 331 }<br> <br> This also happens with other script options if you uncheck them.<br> <br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I'm using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br> Regards,<br> <span style='color:#888888'>JP.-<br> <br> </span><o:p></o:p></p> </div> </div> <p class=MsoNormal style='margin-bottom:12.0pt'>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=5" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><o:p></o:p></p> </blockquote> </div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> </div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> </div> </div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> </div> </div> </blockquote> </div> <p class=MsoNormal><o:p>&nbsp;</o:p></p> </div> </body> </html> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789263&i=6" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26789269 2009-12-14T20:17:32Z 2009-12-14T20:17:32Z Vadim Kurland ✎ <div><br></div>the problem with empty shell functions should be fixed in v3.1 build 2137.<div><br></div><div>I am going to look into VRRP interfaces configuration in the next couple of days. Could you give me your vrrpd configurations ? This would help me a lot.</div> <div><br></div><div>--vk</div><div><br><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 4:38 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=0" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div class="gmail_quote"><div class="im"><br><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"><div><br></div>Isn&#39;t protocol supported by keepalived  called &quot;heartbeat&quot; ? It is not VRRP I believe.</blockquote> <div> </div></div><div>Keepalived has an option (-P) to use vrrp only. It works alike vrrpd, but from the manpage it seems to have less features<br> </div><div class="im"><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"> <div><br></div><div>anyway, If vrrpd can work in a way where it does not create vrrp interfaces (vrrp0, vrrp1 etc) but instead assigns alias IP addresses to existing physical interfaces, then this is similar to how heartbeat works. I am going to look into this, I suppose there should be an option to let fwbuilder known which way vrrpd is used. In any case, you just uncheck the checkbox &quot;Configure interfaces&quot; so it won&#39;t try to manage these interfaces.</div> </blockquote><div> </div></div><div>AFAIK there is no other option but to have it as an alias of an existing interface. When using vrrp implementations and versions I mentioned is just not possible. Dunno if another implementation let&#39;s you do it that way because when searching for it I couldn&#39;t find any other.<br>  </div><div class="im"><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"><br><div>meanwhile you can configure your failover groups in fwbuilder to use protocol &quot;None&quot;. </div> </blockquote><div> </div></div><div>I tried before and I just realized that the compile errors I was getting were because I was not adding an IP address to each interface, just like vrrp. Solved!<br> <br>Regards,<br><font color="#888888">JP.-<br> <br> <br></font></div><div><div></div><div class="h5"><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"><font color="#888888"><br><div>--vk</div></font><div> <div></div><div><div> <br></div><div><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 3:58 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=1" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex">Sorry I wasn&#39;t clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don&#39;t know how to create them.<br> <br>Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can&#39;t get any new interfaces created on the system  (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br>For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br>    inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br>       valid_lft forever preferred_lft forever<br> <br>fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>    link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet <a href="http://10.78.78.10/32" target="_blank" rel="nofollow">10.78.78.10/32</a> scope global eth0<br>    inet6 fe80::200:5eff:fe00:132/64 scope link <br>        valid_lft forever preferred_lft forever<br> <br>I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn&#39;t work either. <br><br>vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br>I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br><br>Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br>Regards,<br><font color="#888888">JP.-</font><div><div></div><div><br><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=2" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"> <br>I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.<div><br></div><div>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</div> <div><br></div><div>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</div><div> <br> </div><div>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</div><div><br></div><div> --vk</div><div><br></div><div><br><div class="gmail_quote"><div><div></div><div>On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=3" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> </div></div><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"><div><div></div><div> Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin:0px;text-indent:0px"># Interface vrrp0 does not exist</p><p style="margin:0px;text-indent:0px"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br><font color="#888888">JP.-<br><br> </font><br></div></div>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> </blockquote></div><br> </div></div></blockquote></div><br></div> </div></div></blockquote></div></div></div><br> </blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26789269&i=5" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26787639 2009-12-14T16:38:17Z 2009-12-14T16:38:17Z Juan Pablo Villa <div class="gmail_quote"><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><br></div>Isn&#39;t protocol supported by keepalived  called &quot;heartbeat&quot; ? It is not VRRP I believe.</blockquote> <div> </div><div>Keepalived has an option (-P) to use vrrp only. It works alike vrrpd, but from the manpage it seems to have less features<br> </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div><br></div><div>anyway, If vrrpd can work in a way where it does not create vrrp interfaces (vrrp0, vrrp1 etc) but instead assigns alias IP addresses to existing physical interfaces, then this is similar to how heartbeat works. I am going to look into this, I suppose there should be an option to let fwbuilder known which way vrrpd is used. In any case, you just uncheck the checkbox &quot;Configure interfaces&quot; so it won&#39;t try to manage these interfaces.</div> </blockquote><div> </div><div>AFAIK there is no other option but to have it as an alias of an existing interface. When using vrrp implementations and versions I mentioned is just not possible. Dunno if another implementation let&#39;s you do it that way because when searching for it I couldn&#39;t find any other.<br>  </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><br><div>meanwhile you can configure your failover groups in fwbuilder to use protocol &quot;None&quot;. </div> </blockquote><div> </div><div>I tried before and I just realized that the compile errors I was getting were because I was not adding an IP address to each interface, just like vrrp. Solved!<br> <br>Regards,<br>JP.-<br><br> <br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><font color="#888888"><br><div>--vk</div></font><div><div></div><div class="h5"><div> <br></div><div><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 3:58 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787639&i=0" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Sorry I wasn&#39;t clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don&#39;t know how to create them.<br> <br>Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can&#39;t get any new interfaces created on the system  (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br>For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br>    inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br>       valid_lft forever preferred_lft forever<br> <br>fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>    link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet <a href="http://10.78.78.10/32" target="_blank" rel="nofollow">10.78.78.10/32</a> scope global eth0<br>    inet6 fe80::200:5eff:fe00:132/64 scope link <br>        valid_lft forever preferred_lft forever<br> <br>I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn&#39;t work either. <br><br>vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br>I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br><br>Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br>Regards,<br><font color="#888888">JP.-</font><div><div></div><div><br><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787639&i=1" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <br>I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.<div><br></div><div>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</div> <div><br></div><div>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</div><div> <br> </div><div>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</div><div><br></div><div> --vk</div><div><br></div><div><br><div class="gmail_quote"><div><div></div><div>On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787639&i=2" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> </div></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div> Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin: 0px; text-indent: 0px;"># Interface vrrp0 does not exist</p><p style="margin: 0px; text-indent: 0px;"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br><font color="#888888">JP.-<br><br> </font><br></div></div>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787639&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> </blockquote></div><br> </div></div></blockquote></div><br></div> </div></div></blockquote></div><br> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787639&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26787412 2009-12-14T16:08:45Z 2009-12-14T16:08:45Z Vadim Kurland ✎ <div><br></div>Isn&#39;t protocol supported by keepalived  called &quot;heartbeat&quot; ? It is not VRRP I believe.<div><br></div><div>anyway, If vrrpd can work in a way where it does not create vrrp interfaces (vrrp0, vrrp1 etc) but instead assigns alias IP addresses to existing physical interfaces, then this is similar to how heartbeat works. I am going to look into this, I suppose there should be an option to let fwbuilder known which way vrrpd is used. In any case, you just uncheck the checkbox &quot;Configure interfaces&quot; so it won&#39;t try to manage these interfaces.</div> <div><br></div><div>fwbuilder does not generate vrrpd configuration and most likely will not do this.</div><div><br></div><div>meanwhile you can configure your failover groups in fwbuilder to use protocol &quot;None&quot;. </div> <div><br></div><div>Setting protocol to vrrp in the failover group does several things:</div><div><br></div><div> - if &quot;configure interfaces&quot; option is turned on, then generated script will try to manage vrrp interface and configure its ip address . As I said, this should probably change with addition of a new option.</div> <div><br></div><div> - regardless of that, fwbuilder will add rules to the generated script to permit VRRP packets between cluster members.</div><div><br></div><div>If you choose protocol &quot;None&quot;, both this functions won&#39;t work, but the rest of the cluster configuration generator should work so it will replace cluster object and its interfaces with corresponding members when it processes policy.</div> <div><br></div><div><br></div><div>--vk</div><div><br></div><div><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 3:58 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787412&i=0" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Sorry I wasn&#39;t clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don&#39;t know how to create them.<br> <br>Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can&#39;t get any new interfaces created on the system  (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br>For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br>    inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br>       valid_lft forever preferred_lft forever<br> <br>fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>    link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_blank" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet <a href="http://10.78.78.10/32" target="_blank" rel="nofollow">10.78.78.10/32</a> scope global eth0<br>    inet6 fe80::200:5eff:fe00:132/64 scope link <br>        valid_lft forever preferred_lft forever<br> <br>I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn&#39;t work either. <br><br>vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br>I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br><br>Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br>Regards,<br><font color="#888888">JP.-</font><div><div></div><div class="h5"><br><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787412&i=1" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"> <br>I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.<div><br></div><div>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</div> <div><br></div><div>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</div><div> <br> </div><div>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</div><div><br></div><div> --vk</div><div><br></div><div><br><div class="gmail_quote"><div><div></div><div>On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787412&i=2" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> </div></div><blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex"><div><div></div><div> Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin:0px;text-indent:0px"># Interface vrrp0 does not exist</p><p style="margin:0px;text-indent:0px"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br><font color="#888888">JP.-<br><br> </font><br></div></div>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787412&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> </blockquote></div><br> </div></div></blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787412&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26787293 2009-12-14T15:58:08Z 2009-12-14T15:58:08Z Juan Pablo Villa Sorry I wasn&#39;t clear about the vrrp interfaces. My system does not have any vrrpX interface, and frankly I don&#39;t know how to create them.<br><br>Using vrrpd you get an IP alias over the existing interface with a corresponding vrrp mac-addr, but you can&#39;t get any new interfaces created on the system  (AFAIK both vrrpd and keepalived work the same way, but I liked more the vrrpd way and played with it more extensively). <br> <br>For instance, I used vrrp to configure eth0 as follows (10.78.78.8 is the physical IP and 10.78.78.10 the virtual IP).<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>     link/ether 00:0c:29:5c:24:8f brd ff:ff:ff:ff:ff:ff<br>    inet <a href="http://10.78.78.8/24" target="_top" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet6 fe80::20c:29ff:fe5c:248f/64 scope link <br>       valid_lft forever preferred_lft forever<br> <br>fwdebian1:~# vrrpd -D -i eth0 -v 50 10.78.78.10<br><br>fwdebian1:~# ip addr list eth0<br>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000<br>    link/ether 00:00:5e:00:01:32 brd ff:ff:ff:ff:ff:ff<br>     inet <a href="http://10.78.78.8/24" target="_top" rel="nofollow">10.78.78.8/24</a> scope global eth0<br>    inet <a href="http://10.78.78.10/32" target="_top" rel="nofollow">10.78.78.10/32</a> scope global eth0<br>    inet6 fe80::200:5eff:fe00:132/64 scope link <br>       valid_lft forever preferred_lft forever<br> <br>I tried declaring vrrp2 as the cluster interface for eth0 (I assume it is the index you mentioned) but it didn&#39;t work either. <br><br>vrrpd also lets you configure additional IPs and monitored circuit interfaces, which are handy if you need to use them on NAT rules, and take it right away to the other cluster member if any of the monitored interfaces is down. It will be extra nice to have this functionality built into fwbuilder ;-). <br> <br>I have used those aliases on physical interfaces with fwbuilder and they are really nice if you come from proxy-arp hell back there at CheckPoint camp.<br><br>Can I suggest an option to skip the vrrp IP assignment on compile?<br> <br>Regards,<br>JP.-<br><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 7:28 PM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787293&i=0" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <br>I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.<div><br></div><div>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</div> <div><br></div><div>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</div><div> <br> </div><div>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</div><div><br></div><div> --vk</div><div><br></div><div><br><div class="gmail_quote"><div><div></div><div class="h5">On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787293&i=1" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br> </div></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div class="h5"> Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin: 0px; text-indent: 0px;"># Interface vrrp0 does not exist</p><p style="margin: 0px; text-indent: 0px;"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br><font color="#888888">JP.-<br><br> </font><br></div></div>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787293&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> </blockquote></div><br> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26787293&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26786176 2009-12-14T14:28:17Z 2009-12-14T14:28:17Z Vadim Kurland ✎ <br>I&#39;ll fix the issue with empty functions. I create a bug for this and added you to Cc, you&#39;ll get email when this is fixed. Should be today.<div><br></div><div>as far as vrrp interfaces, I am not sure I follow you. You say the firewall does not have vrrp0 interface. Does it have vrrp1 ? Does it have any vrrp interfaces at all ?</div> <div><br></div><div>It is my understanding that vrrpd creates vrrp interface. If the index is not &quot;0&quot;, you should be able to create interface &quot;vrrp1&quot; or any other in fwbuilder just as well.</div><div><br> </div><div>The part that configures interfaces does not produce configuration for vrrpd, you need to do this yourself.  Script created by fwbuilder can assign ip address to vrrp interface though.</div><div><br></div><div> --vk</div><div><br></div><div><br><div class="gmail_quote">On Mon, Dec 14, 2009 at 2:16 PM, Juan Pablo Villa <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26786176&i=0" target="_top" rel="nofollow">jpvilla@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_blank" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_blank" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin:0px;text-indent:0px"># Interface vrrp0 does not exist</p><p style="margin:0px;text-indent:0px"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin:0px;text-indent:0px">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br><font color="#888888">JP.-<br><br> </font><br>------------------------------------------------------------------------------<br> Return on Information:<br> Google Enterprise Search pays you back<br> Get the facts.<br> <a href="http://p.sf.net/sfu/google-dev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br> <br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26786176&i=1" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26786176&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26786003 2009-12-14T14:16:21Z 2009-12-14T14:16:21Z Juan Pablo Villa Hi all, <br><br>I recently came across fwbuilder and right now I&#39;m trying to set up a vrrp cluster on debian lenny. <br><br>I&#39;m a long time open source fan, but I have been working heavily with Checkpoint NGX for the last 3 years, and I missed pretty much everything from the open source world during that time. Happily I&#39;m back, and just amazed with the fwbuilder goodies.<br> <br>I&#39;m running fwbuilder 3.1 build 2131 on ubuntu jaunty amd64. I would like to test more extensively the vrrp features, but I&#39;m stuck with the basic vrrp setup.<br><br>The main problem that I&#39;m having is that I don&#39;t have a vrrp0 interface on my firewalls. I have tried vrrpd  (<a href="http://packages.debian.org/lenny/vrrpd" target="_top" rel="nofollow">http://packages.debian.org/lenny/vrrpd</a>) and keepalived (<a href="http://packages.debian.org/lenny/keepalived" target="_top" rel="nofollow">http://packages.debian.org/lenny/keepalived</a>) and none of them creates an interface with such an index.<br> <br>If I try to install policy with a cluster interface with this name (vrrp0) the installation fails with this message:<p style="margin: 0px; text-indent: 0px;"># Interface vrrp0 does not exist</p><p style="margin: 0px; text-indent: 0px;"> <br></p>To workaround this issue, I tried not to include interface checking, but this generates a script error (function remains on the script, but empty, and that causes a syntax error)<br><br> <meta name="qrichtext" content="1"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: syntax error near unexpected token `}&#39;</p> <p style="margin: 0px; text-indent: 0px;">/etc/fwdebian1.fw: line 331: `}&#39;</p><br>line 329 verify_interfaces() {<br>line 330<br>line 331 }<br><br>This also happens with other script options if you uncheck them.<br><br> I might add that I have configured VRRP manually (coming from Nokia IPSO camp, this was a no brainer), so if the GUI can install a policy by just setting it to VRRP but without generating any VRRP code, it is ok for me right now (currently I&#39;m using openais as a workaround to be able to install policy without fuss, with vrrpd configured manually on each box).<br> <br>Regards,<br>JP.-<br><br> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26786003&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26771946 2009-12-13T17:41:52Z 2009-12-13T17:41:52Z Vadim Kurland ✎ <font class="Apple-style-span" face="arial, helvetica, sans-serif"><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Please join us testing new Firewall Builder v3.1. </font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br> </font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Volunteers needed who can test new features related to the firewall cluster configurations, as well as VLAN, bonding and bridge interface configurations.</font></div> <div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><br></font><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">build 2131 includes few bug fixes and improvements suggested by Heiko </font><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif">Schlichting :</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - changed object sorting order to show Policy, NAT and Routing above interfaces of the firewall. This helps when you have a lot of interfaces but mostly work on the rules</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - objects in the tree are sorted alphabetically, case-insensitive. Please let me know if this creates problems for you and I&#39;ll make this an option in Preferences. Sorting order used to be case-sensitive.</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - compiler output panel that is used when you compile a single rule was losing scroll bar when detached.</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - compiler output in this window now includes the comment of the rule</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br> </span></font></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif">Other  fixes in the GUI</font></span></div><div> <span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><meta charset="utf-8"><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - editor panel, that also includes tabs for search functions and compiler output panel, can be stretched when detached.</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - fixed excessive flicker and unnecessary scrolling of the rule set view when user changes action, direction, options or logging in the rule.</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - fixed font size in the &quot;about&quot; dialog to make the title &quot;Firewall Builder vNN.NN&quot; fit in the dialog window</font></span></div> <div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span></div><div><span class="Apple-style-span" style="font-size: 13px; border-collapse: collapse; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> - default font in the compiler output window is the same size as for the rest of the GUI (was too small)</font></span></div> <div><span class="Apple-style-span" style="border-collapse: collapse;"><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></span></div><div><span class="Apple-style-span" style="border-collapse: collapse;"><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br> </font></span></div><div><font class="Apple-style-span" face="Verdana, Arial, &#39;Bitstream Vera Sans&#39;, Helvetica, sans-serif"><span class="Apple-style-span" style="border-collapse: collapse;"><br></span></font></div> <meta charset="utf-8"> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26771946&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26739000 2009-12-10T21:31:45Z 2009-12-10T21:31:45Z Vadim Kurland ✎ Hi all,<div><br></div><div>as you remember, we had rather active discussion on this list  a few weeks ago where it was decided that it makes sense to get rid of the &quot;Apply&quot; button in the object editor panel and just save the changes into the object in memory immediately. This has been implemented, together with complete Undo facility, and new packages are ready for testing. </div> <div><br></div><div>These packages are available as Firewall Builder v3.1. This version number is temporary and the code will be released as Firewall Builder v4.0 when it is ready. I do not want to imply that this is public beta of v4.0 just yet, although it is very close. </div> <div><br></div><div>I would like to know your opinion on the new GUI before I go full public beta.</div><div><br></div><div>I would appreciate it very much if you could take a look at the new version. It has a many new features and overall I feel it has matured a lot. Come on, we now have undo :-)</div> <div><br></div><div>Packages are available in the usual place here:  </div><div><br></div><div><a href="http://www.fwbuilder.org/nightly_builds/fwbuilder-3.1/" target="_top" rel="nofollow">http://www.fwbuilder.org/nightly_builds/fwbuilder-3.1/</a></div> <div><br></div><div>As always, grab the latest build for testing.</div><div><br></div><div>Quick summary of new features in v3.1 (to be released as v4.0) :</div><div><br></div><div> - undo for all operations with objects and rules</div> <div><br></div><div> - use main menu View/Undo stack to open a window that shows undo stack. Clicking a row in this window executes all commands up to that row, including the command shown in it. Highlighted row corresponds to the last command that has been executed.</div> <div><br></div><div> - <span class="Apple-style-span" style="font-family: arial, sans-serif; ">Object editor picks up and saves changes into the object when you hit Return in all text input fields or move keyboard focus away from the entry field (i.e. click on another one). This works almost identical to the &quot;automatic save changes&quot; mode of the v3.0.x except in v3.0 the change was saved into the object when you opened different object in the editor.<span class="__wave_paste"></span><span> </span></span></div> <div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span><br></span></span></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span> - &quot;Immediate compile&quot;. Just highlight a rule in policy or NAT rule set and hit  &#39;x&#39; key (or use context menu item). This compiles this one rule and shows generated script or configuration lines in the bottom panel in the GUI. This is great to quickly check what is being generated for some rule you are trying</span></span></div> <div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span><br></span></span></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span> - The editor panel, object tree and undo stack are now docable windows. You can insert them into the main window (this is the default) or detach them and move around on the screen. In the detached state they can overlap the main window which should help when you use application on a small screen (laptop)</span></span></div> <div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span><br></span></span></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span> - the tree, rules and the editor are not tightly synchronized anymore. Before, single click in the tree would open object in the editor. This caused problems if you wanted to populate a group of objects and needed to switch between object libraries or open many tree branches. This tended to switch the object shown in the editor even if you did not want or need to. In the new version this does not happen. The group opened in the editor stays there and you can navigate the tree and click in it freely until you find the object you want, and then just drag it into the group.</span></span></div> <meta charset="utf-8"><div><br></div><div> - support for HA configurations. This includes new object type &quot;Cluster&quot; that encapsulates abstraction of the cluster, its interfaces and rules. Following </div><div>failover protocols are supported: on Linux heartbeat, OpenAIS, VRRP, on BSD CARP, on PIX its own protocol (I guess it does not have special name). State synchronization protocols are supported as well.</div> <div><br></div><div> - support for these HA protocols means the program can automatically add rules to permit packets that carry these protocols between firewalls </div><div>and can configure VRRP interfaces with their own addresses and all. I tried to explain this in more details in the Release Notes which is shown when you start the program.</div> <div><br></div><div> - on Linux we can now generate script to configure VLANs, bonding interfaces, bridges, dynamically update all of these and also dynamically update ip addresses of interfaces. In the older versions, including v3.0, generated script removed all secondary addresses from interfaces and then added them back. New version only removes addresses that have been removed in the GUI and adds new ones.</div> <div><br></div><div> - generated Linux/iptables script has standard structure with command line options &quot;start&quot;, &quot;stop&quot; and few others</div><div><br></div><div> - generated scripts are assembled from fragments that we call &quot;configlets&quot;. You can override configlets that come with the package and use your own to modify generated script. This means you can make changes to the generated script without having to modify C++ code and rebuild the application</div> <div><br></div><div> - configlets use very simple macro language that  supports variable expansion and &quot;if&quot; construct for conditionals</div><div><br></div><div> - <span class="Apple-style-span" style="font-family: arial, sans-serif; ">there has been a change in the generated script for the rules that use dynamic interfaces . I implemented change suggested by one of the users who noticed that dynamic ipv6 addresses were not handled properly in v3.0.x and suggested a fix. Now behavior has changed as follows: 1) if you use dynamic interface in the rule, the program generates shell function that reads all ip addresses of this interface and uses them in the rule (before it would only read and use the first address) 2) it does the same for ipv6 addresses if the rule belongs to ipv6 rule set<span class="__wave_paste"></span><span> </span></span></div> <div><span class="Apple-style-span" style="font-family: arial, sans-serif; "><span><br></span></span></div><meta charset="utf-8"><div><br></div><div>I&#39;ve been playing with Google Wave recently and like it very much. It combines features of several communication systems:</div> <div><br></div><div> - email: hierarchical structure of quotations and permanent nature of messages so you can get back to them to review and reply later; many people can participate; you can post a reply to a specific paragraph from the middle of somebody else&#39;s post which creates nested level in the discussion</div> <div><br></div><div> - chat: parties can see each other messages in near real time, although you dont have to reply immediately, you can reply later just like answering email</div><div><br></div><div> - wiki: you can get back and edit your post, the resultant discussion is available for people who join later</div> <div><br></div><div><br></div><div>I have some google wave invites. If enough people are interested, I can send invites and we can use it to discuss new version of fwbuilder. I feel this could be more flexible and in the end more convenient than email. However as we go through the testing I will be posting on the mailing list and in the project blog for those who do not use Google wave.</div> <div><br></div><div><br></div><div>Thank you</div><div>Vadim</div><div><br></div><div><br></div><div><br></div> <br />------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26739000&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26720252 2009-12-09T16:09:52Z 2009-12-09T16:09:52Z John Gallagher-4 I would disable the scripts that fwbuilder executes to add NAT addresses to <br>the physical interfaces and use keepalived to manage the transition between <br>the 2 firewalls. Push the exact same config from the fwbuilder app to both <br>firewalls so that when it goes active the rules are already in place. &nbsp;The <br>VRRP config will allow you to run active passive or active active <br>configurations and well as do load balancing. <br><br>Sample Active Passive Keepalived.conf <br><br>vrrp_sync_group VG1 { <br>&nbsp; group { <br>&nbsp; VI_1 <br>&nbsp; VI_2 <br>} <br>} <br><br>vrrp_instance VI_1 { <br># un comment the line below to enable the master router on this system. <br>&nbsp; &nbsp; state MASTER <br>&nbsp; &nbsp; interface bond1 <br>&nbsp; &nbsp; track_interface { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; # Interface state we monitor <br>&nbsp; &nbsp; &nbsp; bond0 <br>&nbsp; &nbsp; &nbsp; bond1 <br>&nbsp; &nbsp; } <br>&nbsp; &nbsp; garp_master_delay 10 <br>&nbsp; &nbsp; smtp_alert <br>&nbsp; &nbsp; virtual_router_id 51 <br># Change the priority to 80 on secondary router <br>&nbsp; &nbsp; priority 180 <br>&nbsp; &nbsp; nopreempt <br>&nbsp; &nbsp; advert_int 1 <br>&nbsp; &nbsp; authentication { <br>&nbsp; &nbsp; &nbsp; &nbsp; auth_type PASS <br>&nbsp; &nbsp; &nbsp; &nbsp; auth_pass ****** <br>&nbsp; &nbsp; } <br>&nbsp; &nbsp; virtual_ipaddress { <br>&nbsp; &nbsp; &nbsp; &nbsp; 98.x.x.1 &nbsp;#Public vip-1 WWW, Update and source <br>&nbsp; &nbsp; &nbsp; &nbsp; 98.x.x.2 &nbsp;#Public vip-2 ADS <br>&nbsp; &nbsp; &nbsp; &nbsp; 98.x.x.3 &nbsp;#Public vip-3 Blog <br>&nbsp; &nbsp; } <br>} <br><br>vrrp_instance VI_2 { <br># uncomment the line below to enable the master router on this system <br>&nbsp; &nbsp; state MASTER <br>&nbsp; &nbsp; interface bond0 <br>&nbsp; &nbsp; track_interface { &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; # Interface state we monitor <br>&nbsp; &nbsp; &nbsp; bond0 <br>&nbsp; &nbsp; &nbsp; bond1 <br>&nbsp; &nbsp; } <br>&nbsp; &nbsp; smtp_alert <br>&nbsp; &nbsp; virtual_router_id 52 <br># Change the priority to 80 on secondary router <br>&nbsp; &nbsp; priority 180 <br>&nbsp; &nbsp; advert_int 1 <br>&nbsp; &nbsp; authentication { <br>&nbsp; &nbsp; &nbsp; &nbsp; auth_type PASS <br>&nbsp; &nbsp; &nbsp; &nbsp; auth_pass **** <br>&nbsp; &nbsp; } <br>&nbsp; &nbsp; virtual_ipaddress { <br>&nbsp; &nbsp; &nbsp; &nbsp; 10.x.x.254 <br>&nbsp; &nbsp; } <br>} <br><br>John <br><br><br><br><br><br>------------------------------------------------------------------------------ <br>Return on Information: <br>Google Enterprise Search pays you back <br>Get the facts. <br><a href="http://p.sf.net/sfu/google-dev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/google-dev2dev</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26720252&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26679150 2009-12-07T07:16:21Z 2009-12-07T07:16:21Z Anthony Ciaravalo Emmanuel Oga wrote: <br>&gt; <br>&gt; That makes sense, can you recommend me a way of monitoring my network <br>&gt; connections in general? I tried tcpdump but it generates an awful lot <br>&gt; of information and I'm not sure how to digest it, even with the help <br>&gt; of wireshark <br>&gt; <br><br>for tcp traffic, i have always found iptraf to be useful when you don't need to view specific packet details and want easy to read ip/port statistical counters. <br><br>...from the man page... <br><br>iptraf is an ncurses-based IP LAN monitor that generates various network statistics including TCP info, UDP counts, ICMP and OSPF information, Ethernet load info, node stats, IP checksum errors, and others. <br><br><br>specifically using the first monitor option <br>IP traffic monitor <br><br>you can sort the tcp connections by packet or byte count. &nbsp;it will show src and dst ip and port counters, so you will easily be able to tell if a specific src ip address has a high byte/packet count to one of your services (or possibly you have a lot of outgoing traffic if your system has been <br>hacked and you will see a high count with a src of your ip). &nbsp;it will also show other protocols like icmp and udp packets in the lower half of the window, but it scrolls like tcpdump does, so if you end up needing to track those for something this is not the program. <br><br><br><br>there is a geoip patchomatic patchlet for iptables and the kernel that lets you filter based on geographic location, but it has not been maintained in a few years; and it also requires patching iptables and the kernel source and recompiling both... not sure about anything using dnsbl for iptables. <br><br><br>as far as blocking using apache, you can look into these apache modules <br><br><a href="http://www.maxmind.com/app/mod_geoip" target="_top" rel="nofollow">http://www.maxmind.com/app/mod_geoip</a><br>it will let you block based on geographical location. <br><br><a href="http://sourceforge.net/projects/mod-spamhaus/" target="_top" rel="nofollow">http://sourceforge.net/projects/mod-spamhaus/</a><br>it will let you block using dnsbl. <br><br><br><br><br>------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26679150&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26670891 2009-12-06T16:18:57Z 2009-12-06T16:18:57Z Vadim Kurland ✎ <br><br><div class="gmail_quote">On Sun, Dec 6, 2009 at 3:54 PM, Emmanuel Oga <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670891&i=0" target="_top" rel="nofollow">emmanueloga@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div class="im">On Sun, Dec 6, 2009 at 2:01 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670891&i=1" target="_top" rel="nofollow">vadim@...</a>&gt; wrote:<br> &gt;<br> &gt; normal 404 response from the web server is small, something like 300 or 400<br> &gt; bytes. Unless you are serving really fancy 404 pages from your web server,<br> &gt; it feels unlikely that someone could pull 1.5Gb from it in just 404 replies.<br> &gt; That is over 3.7 million queries. To do that they would have to send about 3<br> &gt; requests per second all the time steadily for two weeks. That looks like<br> &gt; some kind of DDOS and can&#39;t be random. Do apache log files have over 3<br> &gt; million lines for the interval of these 2 weeks ?<br> &gt; Are you sure all the traffic was from the web server ? May be you have other<br> &gt; services running on this machine and the traffic was generated by something<br> &gt; else ?<br> &gt; You can build firewall rules to block some sources, whole countries even,<br> &gt; but if you have something like incorrectly configured ftp server on the<br> &gt; machine, it will be  abused from addresses coming from other countries<br> &gt; anyway. Blocking by source IP is inefficient and unreliable way.<br> &gt; --vk<br> <br> </div>That makes sense, can you recommend me a way of monitoring my network<br> connections in general? I tried tcpdump but it generates an awful lot<br> of information and I&#39;m not sure how to digest it, even with the help<br> of wireshark<br> <div><div></div><div class="h5"><br></div></div></blockquote><div><br></div><div>you can start with simple &quot;netstat -na&quot; to see established connections and ports machine is listening on. Consult  /etc/services   or google to interpret port numbers. When you use tcpdump, filter out port 22 if you log in over ssh, otherwise the output will be full of your own ssh session and it will be hard to find anything else.</div> <div><br></div><div>--vk</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5"> &gt;<br> &gt; On Sat, Dec 5, 2009 at 10:56 PM, Emmanuel Oga &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670891&i=2" target="_top" rel="nofollow">emmanueloga@...</a>&gt; wrote:<br> &gt;&gt;<br> &gt;&gt; Hello<br> &gt;&gt;<br> &gt;&gt; I have a problem I don&#39;t even know how to google for with the proper<br> &gt;&gt; terms.<br> &gt;&gt;<br> &gt;&gt; I&#39;m using a VPS to host some http pages, my bandwith per month is fixed at<br> &gt;&gt; about 2gb total.<br> &gt;&gt;<br> &gt;&gt; I leaved apache running, without anything but the hello world page, for<br> &gt;&gt; about 15 days.<br> &gt;&gt;<br> &gt;&gt; When I came back, I learned 1.5GB or so of my bandwith was drained by<br> &gt;&gt; requests from a lot of different hosts (most of them from china).<br> &gt;&gt;<br> &gt;&gt; All the bandwith was sucked by serving 404 pages  (and this was only from<br> &gt;&gt; the apache log, I&#39;m not sure about the connections to other ports).<br> &gt;&gt;<br> &gt;&gt; My question is, how can I block these and other potential sources of &quot;bad<br> &gt;&gt; traffic&quot; ?<br> &gt;&gt;<br> &gt;&gt; Googling around I found these dnsbl black lists, these are supposed to be<br> &gt;&gt; for spam filtering, but would it make sense to use them to block hosts<br> &gt;&gt; trying to connect to my server?<br> &gt;&gt;<br> &gt;&gt; Thanks<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; ------------------------------------------------------------------------------<br> &gt;&gt; Join us December 9, 2009 for the Red Hat Virtual Experience,<br> &gt;&gt; a free event focused on virtualization and cloud computing.<br> &gt;&gt; Attend in-depth sessions from your desk. Your couch. Anywhere.<br> &gt;&gt; <a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br> &gt;&gt; _______________________________________________<br> &gt;&gt; Fwbuilder-discussion mailing list<br> &gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670891&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> &gt;&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt;&gt;<br> &gt;<br> &gt;<br> <br> <br> <br> </div></div><font color="#888888">--<br> --------------------------------------------------------------<br> EmmanuelOga.com - Software Developer<br> </font></blockquote></div><br> <br />------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670891&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26670632 2009-12-06T15:54:46Z 2009-12-06T15:54:46Z EmmanuelOga On Sun, Dec 6, 2009 at 2:01 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670632&i=0" target="_top" rel="nofollow">vadim@...</a>&gt; wrote: <div class='shrinkable-quote'><br>&gt; <br>&gt; normal 404 response from the web server is small, something like 300 or 400 <br>&gt; bytes. Unless you are serving really fancy 404 pages from your web server, <br>&gt; it feels unlikely that someone could pull 1.5Gb from it in just 404 replies. <br>&gt; That is over 3.7 million queries. To do that they would have to send about 3 <br>&gt; requests per second all the time steadily for two weeks. That looks like <br>&gt; some kind of DDOS and can't be random. Do apache log files have over 3 <br>&gt; million lines for the interval of these 2 weeks ? <br>&gt; Are you sure all the traffic was from the web server ? May be you have other <br>&gt; services running on this machine and the traffic was generated by something <br>&gt; else ? <br>&gt; You can build firewall rules to block some sources, whole countries even, <br>&gt; but if you have something like incorrectly configured ftp server on the <br>&gt; machine, it will be  abused from addresses coming from other countries <br>&gt; anyway. Blocking by source IP is inefficient and unreliable way. <br>&gt; --vk </div><br>That makes sense, can you recommend me a way of monitoring my network <br>connections in general? I tried tcpdump but it generates an awful lot <br>of information and I'm not sure how to digest it, even with the help <br>of wireshark <br><div class='shrinkable-quote'><br>&gt; <br>&gt; On Sat, Dec 5, 2009 at 10:56 PM, Emmanuel Oga &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670632&i=1" target="_top" rel="nofollow">emmanueloga@...</a>&gt; wrote: <br>&gt;&gt; <br>&gt;&gt; Hello <br>&gt;&gt; <br>&gt;&gt; I have a problem I don't even know how to google for with the proper <br>&gt;&gt; terms. <br>&gt;&gt; <br>&gt;&gt; I'm using a VPS to host some http pages, my bandwith per month is fixed at <br>&gt;&gt; about 2gb total. <br>&gt;&gt; <br>&gt;&gt; I leaved apache running, without anything but the hello world page, for <br>&gt;&gt; about 15 days. <br>&gt;&gt; <br>&gt;&gt; When I came back, I learned 1.5GB or so of my bandwith was drained by <br>&gt;&gt; requests from a lot of different hosts (most of them from china). <br>&gt;&gt; <br>&gt;&gt; All the bandwith was sucked by serving 404 pages  (and this was only from <br>&gt;&gt; the apache log, I'm not sure about the connections to other ports). <br>&gt;&gt; <br>&gt;&gt; My question is, how can I block these and other potential sources of &quot;bad <br>&gt;&gt; traffic&quot; ? <br>&gt;&gt; <br>&gt;&gt; Googling around I found these dnsbl black lists, these are supposed to be <br>&gt;&gt; for spam filtering, but would it make sense to use them to block hosts <br>&gt;&gt; trying to connect to my server? <br>&gt;&gt; <br>&gt;&gt; Thanks <br>&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; ------------------------------------------------------------------------------ <br>&gt;&gt; Join us December 9, 2009 for the Red Hat Virtual Experience, <br>&gt;&gt; a free event focused on virtualization and cloud computing. <br>&gt;&gt; Attend in-depth sessions from your desk. Your couch. Anywhere. <br>&gt;&gt; <a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>&gt;&gt; _______________________________________________ <br>&gt;&gt; Fwbuilder-discussion mailing list <br>&gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670632&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br>&gt;&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br>&gt;&gt; <br>&gt; <br>&gt; </div><br><br><br>-- <br>-------------------------------------------------------------- <br>EmmanuelOga.com - Software Developer <br><br>------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26670632&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26669998 2009-12-06T14:43:27Z 2009-12-06T14:43:27Z Tom Diehl Hi, <br><br>The subject says it all!! <br><br>Happy reading and Congrats Vadim. I enjoyed the read. <br><br>Regards, <br><br>-- <br>Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26669998&i=0" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26669998&i=1" target="_top" rel="nofollow">mtd123@...</a> <br><br>------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26669998&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26666820 2009-12-06T09:01:25Z 2009-12-06T09:01:25Z Vadim Kurland ✎ <div><br></div>normal 404 response from the web server is small, something like 300 or 400 bytes. Unless you are serving really fancy 404 pages from your web server, it feels unlikely that someone could pull 1.5Gb from it in just 404 replies. That is over 3.7 million queries. To do that they would have to send about 3 requests per second all the time steadily for two weeks. That looks like some kind of DDOS and can&#39;t be random. Do apache log files have over 3 million lines for the interval of these 2 weeks ?<div> <br></div><div>Are you sure all the traffic was from the web server ? May be you have other services running on this machine and the traffic was generated by something else ? </div><div><br></div><div>You can build firewall rules to block some sources, whole countries even, but if you have something like incorrectly configured ftp server on the machine, it will be  abused from addresses coming from other countries anyway. Blocking by source IP is inefficient and unreliable way.</div> <div><br></div><div>--vk</div><div><br><br><div class="gmail_quote">On Sat, Dec 5, 2009 at 10:56 PM, Emmanuel Oga <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26666820&i=0" target="_top" rel="nofollow">emmanueloga@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> Hello<br clear="all"><br>I have a problem I don&#39;t even know how to google for with the proper terms.<br><br>I&#39;m using a VPS to host some http pages, my bandwith per month is fixed at about 2gb total.<br><br>I leaved apache running, without anything but the hello world page, for about 15 days.<br> <br>When I came back, I learned 1.5GB or so of my bandwith was drained by requests from a lot of different hosts (most of them from china).<br><br>All the bandwith was sucked by serving 404 pages  (and this was only from the apache log, I&#39;m not sure about the connections to other ports).<br> <br>My question is, how can I block these and other potential sources of &quot;bad traffic&quot; ?<br><br>Googling around I found these dnsbl black lists, these are supposed to be for spam filtering, but would it make sense to use them to block hosts trying to connect to my server?<br> <br>Thanks<br> <br>------------------------------------------------------------------------------<br> Join us December 9, 2009 for the Red Hat Virtual Experience,<br> a free event focused on virtualization and cloud computing.<br> Attend in-depth sessions from your desk. Your couch. Anywhere.<br> <a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_blank" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>_______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26666820&i=1" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br></blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26666820&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26662707 2009-12-05T22:56:25Z 2009-12-05T22:56:25Z EmmanuelOga Hello<br clear="all"><br>I have a problem I don&#39;t even know how to google for with the proper terms.<br><br>I&#39;m using a VPS to host some http pages, my bandwith per month is fixed at about 2gb total.<br><br>I leaved apache running, without anything but the hello world page, for about 15 days.<br> <br>When I came back, I learned 1.5GB or so of my bandwith was drained by requests from a lot of different hosts (most of them from china).<br><br>All the bandwith was sucked by serving 404 pages  (and this was only from the apache log, I&#39;m not sure about the connections to other ports).<br> <br>My question is, how can I block these and other potential sources of &quot;bad traffic&quot; ?<br><br>Googling around I found these dnsbl black lists, these are supposed to be for spam filtering, but would it make sense to use them to block hosts trying to connect to my server?<br> <br>Thanks<br> <br />------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26662707&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26584250 2009-11-30T15:41:33Z 2009-11-30T15:41:33Z Vadim Kurland ✎ <br><br><div class="gmail_quote">On Mon, Nov 30, 2009 at 3:29 PM, Tom Diehl <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=0" target="_top" rel="nofollow">tdiehl@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> <div class="im">On Sun, 29 Nov 2009, Vadim Kurland wrote:<br> <br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Fedora Core 12 RPMs are now available for download from the nightly builds<br> site and &quot;testing&quot; RPM repository<br> <br> Note that if you use yum update to update from &quot;texting&quot; repository, it  may<br> fail because there is no FC12 directory in the &quot;stable&quot; repository which<br> usually comes first. If this happens to you, try command<br> <br> yum --disablerepo=fwbuilder --enablerepo=fwbuilder-testing install fwbuilder<br> </blockquote> <br></div> Makes perfect sense. Thanks for the quick response.<br> <br> I just loaded build 1977 on my f12 machine. In light initial testing it looks<br> like it is working as expected.<br> <br></blockquote><div><br></div><div>the difference between v3.0.8 and the latest released &quot;stable&quot; v3.0.7 is minimal, just a couple of bug fixes. </div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> I just noticed that rules that I have the color set to Grey loose the lines<br> that make up the squares (not sure what the proper term for them is, sorry)<br> because those lines are also Grey. Has it always been this way? I never noticed<br> it before and I am wondering if there is some way to change the color of those<br> lines so that Grey rules do not look like 1 big blob of Grey with words stuck<br> on it. Didn&#39;t they used to be black?<div><div></div><div class="h5"><br></div></div></blockquote><div><br></div><div><br></div><div>it should always have been like this, although this may also depend on the current QT theme. We did not touch this part of the code in a very long time. In any case, you can change the color shade of &quot;grey&quot; in the Preferences dialog (tab &quot;Labels&quot;)</div> <div><br></div><div>--vk</div><div><br></div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><div class="h5"> <br> Regards,<br> <br> -- <br> Tom Diehl       <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=1" target="_top" rel="nofollow">tdiehl@...</a>      Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=2" target="_top" rel="nofollow">mtd123@...</a><br> <br> <br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <br> --vk<br> <br> <br> On Sat, Nov 28, 2009 at 1:02 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=3" target="_top" rel="nofollow">vadim@...</a>&gt;wrote:<br> <br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <br> I meant to do this, but it just slipped through cracks. In fact, I am going<br> to start download right now. It should take me some time to set up the VM<br> and such but rpms should be ready in a couple of days. It will be v3.0.8<br> <br> --vk<br> <br> On Sat, Nov 28, 2009 at 12:50 PM, Tom Diehl &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=4" target="_top" rel="nofollow">tdiehl@...</a>&gt; wrote:<br> <br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi,<br> <br> Are their plans to provide rpms for Fedora 12? I tried to install the F11<br> rpms but I get missing dep errors. In case it is useful, the yum<br> transaction is<br> below.<br> <br> (tigger3 pts8) # yum install fwbuilder-3.0.7-b1477.fc11<br> Loaded plugins: presto, refresh-packagekit<br> adobe-linux-i386<br> <br>                                                               |  951 B<br> 00:00<br> adobe-linux-i386/primary<br> <br>                                                               |  12 kB<br> 00:00<br> adobe-linux-i386<br> <br> <br>    17/17<br> fedora<br> <br>                                                               | 4.2 kB<br> 00:00<br> fedora/primary_db<br> <br>                                                                |  12 MB<br> 00:01<br> fwbuilder<br> <br>                                                                |  951 B<br> 00:00<br> fwbuilder/primary<br> <br>                                                                | 1.6 kB<br> 00:00<br> fwbuilder<br> <br> <br>       2/2<br> rpmfusion-free<br> <br>                                                               | 3.8 kB<br> 00:00<br> rpmfusion-free/primary_db<br> <br>                                                                | 344 kB<br> 00:00<br> rpmfusion-free-updates<br> <br>                                                               | 3.3 kB<br> 00:00<br> rpmfusion-free-updates/primary_db<br> <br>                                                                | 3.0 kB<br> 00:00<br> rpmfusion-nonfree<br> <br>                                                                | 3.3 kB<br> 00:00<br> rpmfusion-nonfree/primary_db<br> <br>                                                               |  91 kB<br> 00:00<br> rpmfusion-nonfree-updates<br> <br>                                                                | 3.8 kB<br> 00:00<br> rpmfusion-nonfree-updates/primary_db<br> <br>                                                               | 1.1 kB<br> 00:00<br> updates<br> <br>                                                                | 4.4 kB<br> 00:00<br> updates/primary_db<br> <br>                                                               | 547 kB<br> 00:00<br> Setting up Install Process<br> Resolving Dependencies<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libfwbuilder = 3.0.7 for package:<br> fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwcompiler.so.8()(64bit) for package:<br> fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwbuilder.so.8()(64bit) for package:<br> fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package:<br> fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package:<br> fwbuilder-3.0.7-b1477.fc11.x86_64<br> ---&gt; Package libfwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package:<br> libfwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Finished Dependency Resolution<br> fwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems<br>  --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package<br> fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> libfwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving<br> problems<br>  --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package<br> libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package<br> fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package<br> libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br>  You could try using --skip-broken to work around the problem<br>  You could try running: package-cleanup --problems<br>                        package-cleanup --dupes<br>                        rpm -Va --nofiles --nodigest<br> (tigger3 pts8) #<br> <br> Regards,<br> <br> --<br> Tom Diehl       <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=5" target="_top" rel="nofollow">tdiehl@...</a>      Spamtrap address<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=6" target="_top" rel="nofollow">mtd123@...</a><br> <br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008<br> 30-Day<br> trial. Simplify your report design, integration and deployment - and focus<br> on<br> what you do best, core application coding. Discover what&#39;s new with<br> Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=7" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> <br> </blockquote> <br> <br> </blockquote> <br> </blockquote> </div></div></blockquote></div><br> <br />------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584250&i=8" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26584062 2009-11-30T15:29:45Z 2009-11-30T15:29:45Z Tom Diehl On Sun, 29 Nov 2009, Vadim Kurland wrote: <br><br>&gt; Fedora Core 12 RPMs are now available for download from the nightly builds <br>&gt; site and &quot;testing&quot; RPM repository <br>&gt; <br>&gt; Note that if you use yum update to update from &quot;texting&quot; repository, it &nbsp;may <br>&gt; fail because there is no FC12 directory in the &quot;stable&quot; repository which <br>&gt; usually comes first. If this happens to you, try command <br>&gt; <br>&gt; yum --disablerepo=fwbuilder --enablerepo=fwbuilder-testing install fwbuilder <br><br>Makes perfect sense. Thanks for the quick response. <br><br>I just loaded build 1977 on my f12 machine. In light initial testing it looks <br>like it is working as expected. <br><br>I just noticed that rules that I have the color set to Grey loose the lines <br>that make up the squares (not sure what the proper term for them is, sorry) <br>because those lines are also Grey. Has it always been this way? I never noticed <br>it before and I am wondering if there is some way to change the color of those <br>lines so that Grey rules do not look like 1 big blob of Grey with words stuck <br>on it. Didn't they used to be black? <br><br>Regards, <br><br>-- <br>Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=0" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=1" target="_top" rel="nofollow">mtd123@...</a> <br><br><div class='shrinkable-quote'><br>&gt; <br>&gt; --vk <br>&gt; <br>&gt; <br>&gt; On Sat, Nov 28, 2009 at 1:02 PM, Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=2" target="_top" rel="nofollow">vadim@...</a>&gt;wrote: <br>&gt; <br>&gt;&gt; <br>&gt;&gt; I meant to do this, but it just slipped through cracks. In fact, I am going <br>&gt;&gt; to start download right now. It should take me some time to set up the VM <br>&gt;&gt; and such but rpms should be ready in a couple of days. It will be v3.0.8 <br>&gt;&gt; <br>&gt;&gt; --vk <br>&gt;&gt; <br>&gt;&gt; On Sat, Nov 28, 2009 at 12:50 PM, Tom Diehl &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=3" target="_top" rel="nofollow">tdiehl@...</a>&gt; wrote: <br>&gt;&gt; <br>&gt;&gt;&gt; Hi, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Are their plans to provide rpms for Fedora 12? I tried to install the F11 <br>&gt;&gt;&gt; rpms but I get missing dep errors. In case it is useful, the yum <br>&gt;&gt;&gt; transaction is <br>&gt;&gt;&gt; below. <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; (tigger3 pts8) # yum install fwbuilder-3.0.7-b1477.fc11 <br>&gt;&gt;&gt; Loaded plugins: presto, refresh-packagekit <br>&gt;&gt;&gt; adobe-linux-i386 <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;951 B <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; adobe-linux-i386/primary <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;12 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; adobe-linux-i386 <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; 17/17 <br>&gt;&gt;&gt; fedora <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 4.2 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; fedora/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | &nbsp;12 MB <br>&gt;&gt;&gt; 00:01 <br>&gt;&gt;&gt; fwbuilder <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | &nbsp;951 B <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; fwbuilder/primary <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 1.6 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; fwbuilder <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp;2/2 <br>&gt;&gt;&gt; rpmfusion-free <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 3.8 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-free/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 344 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-free-updates <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 3.3 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-free-updates/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.0 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-nonfree <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.3 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-nonfree/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;91 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-nonfree-updates <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.8 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; rpmfusion-nonfree-updates/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 1.1 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; updates <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 4.4 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; updates/primary_db <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 547 kB <br>&gt;&gt;&gt; 00:00 <br>&gt;&gt;&gt; Setting up Install Process <br>&gt;&gt;&gt; Resolving Dependencies <br>&gt;&gt;&gt; --&gt; Running transaction check <br>&gt;&gt;&gt; ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>&gt;&gt;&gt; --&gt; Processing Dependency: libfwbuilder = 3.0.7 for package: <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; --&gt; Processing Dependency: libfwcompiler.so.8()(64bit) for package: <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; --&gt; Processing Dependency: libfwbuilder.so.8()(64bit) for package: <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; --&gt; Running transaction check <br>&gt;&gt;&gt; ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>&gt;&gt;&gt; --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; ---&gt; Package libfwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>&gt;&gt;&gt; --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: <br>&gt;&gt;&gt; libfwbuilder-3.0.7-b1477.fc11.x86_64 <br>&gt;&gt;&gt; --&gt; Finished Dependency Resolution <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems <br>&gt;&gt;&gt; &nbsp; --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>&gt;&gt;&gt; libfwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving <br>&gt;&gt;&gt; problems <br>&gt;&gt;&gt; &nbsp; --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package <br>&gt;&gt;&gt; libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>&gt;&gt;&gt; Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package <br>&gt;&gt;&gt; fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>&gt;&gt;&gt; Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package <br>&gt;&gt;&gt; libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>&gt;&gt;&gt; &nbsp;You could try using --skip-broken to work around the problem <br>&gt;&gt;&gt; &nbsp;You could try running: package-cleanup --problems <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; package-cleanup --dupes <br>&gt;&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; rpm -Va --nofiles --nodigest <br>&gt;&gt;&gt; (tigger3 pts8) # <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; Regards, <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; -- <br>&gt;&gt;&gt; Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=4" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <br>&gt;&gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=5" target="_top" rel="nofollow">mtd123@...</a> <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; <br>&gt;&gt;&gt; ------------------------------------------------------------------------------ <br>&gt;&gt;&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 <br>&gt;&gt;&gt; 30-Day <br>&gt;&gt;&gt; trial. Simplify your report design, integration and deployment - and focus <br>&gt;&gt;&gt; on <br>&gt;&gt;&gt; what you do best, core application coding. Discover what's new with <br>&gt;&gt;&gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>&gt;&gt;&gt; _______________________________________________ <br>&gt;&gt;&gt; Fwbuilder-discussion mailing list <br>&gt;&gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=6" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br>&gt;&gt;&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br>&gt;&gt;&gt; <br>&gt;&gt; <br>&gt;&gt; <br>&gt; </div><br>------------------------------------------------------------------------------ <br>Join us December 9, 2009 for the Red Hat Virtual Experience, <br>a free event focused on virtualization and cloud computing. <br>Attend in-depth sessions from your desk. Your couch. Anywhere. <br><a href="http://p.sf.net/sfu/redhat-sfdev2dev" target="_top" rel="nofollow">http://p.sf.net/sfu/redhat-sfdev2dev</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26584062&i=7" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26570089 2009-11-29T22:21:26Z 2009-11-29T22:21:26Z Vadim Kurland ✎ <div><br></div><div>Fedora Core 12 RPMs are now available for download from the nightly builds site and &quot;testing&quot; RPM repository</div><div><br></div><div>Note that if you use yum update to update from &quot;texting&quot; repository, it  may fail because there is no FC12 directory in the &quot;stable&quot; repository which usually comes first. If this happens to you, try command </div> <div><br></div><div><div>yum --disablerepo=fwbuilder --enablerepo=fwbuilder-testing install fwbuilder</div><div><br></div><div>--vk</div></div><div><br><br><div class="gmail_quote">On Sat, Nov 28, 2009 at 1:02 PM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=0" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div><br></div>I meant to do this, but it just slipped through cracks. In fact, I am going to start download right now. It should take me some time to set up the VM and such but rpms should be ready in a couple of days. It will be v3.0.8<div> <br><font color="#888888">--vk</font></div><div><div></div><div class="h5"><div><br><div class="gmail_quote">On Sat, Nov 28, 2009 at 12:50 PM, Tom Diehl <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=1" target="_top" rel="nofollow">tdiehl@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi,<br> <br> Are their plans to provide rpms for Fedora 12? I tried to install the F11<br> rpms but I get missing dep errors. In case it is useful, the yum transaction is<br> below.<br> <br> (tigger3 pts8) # yum install fwbuilder-3.0.7-b1477.fc11<br> Loaded plugins: presto, refresh-packagekit<br> adobe-linux-i386                                                                                                                                                                                                      |  951 B     00:00<br> adobe-linux-i386/primary                                                                                                                                                                                              |  12 kB     00:00<br> adobe-linux-i386                                                                                                                                                                                                                       17/17<br> fedora                                                                                                                                                                                                                | 4.2 kB     00:00<br> fedora/primary_db                                                                                                                                                                                                     |  12 MB     00:01<br> fwbuilder                                                                                                                                                                                                             |  951 B     00:00<br> fwbuilder/primary                                                                                                                                                                                                     | 1.6 kB     00:00<br> fwbuilder                                                                                                                                                                                                                                2/2<br> rpmfusion-free                                                                                                                                                                                                        | 3.8 kB     00:00<br> rpmfusion-free/primary_db                                                                                                                                                                                             | 344 kB     00:00<br> rpmfusion-free-updates                                                                                                                                                                                                | 3.3 kB     00:00<br> rpmfusion-free-updates/primary_db                                                                                                                                                                                     | 3.0 kB     00:00<br> rpmfusion-nonfree                                                                                                                                                                                                     | 3.3 kB     00:00<br> rpmfusion-nonfree/primary_db                                                                                                                                                                                          |  91 kB     00:00<br> rpmfusion-nonfree-updates                                                                                                                                                                                             | 3.8 kB     00:00<br> rpmfusion-nonfree-updates/primary_db                                                                                                                                                                                  | 1.1 kB     00:00<br> updates                                                                                                                                                                                                               | 4.4 kB     00:00<br> updates/primary_db                                                                                                                                                                                                    | 547 kB     00:00<br> Setting up Install Process<br> Resolving Dependencies<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libfwbuilder = 3.0.7 for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwcompiler.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwbuilder.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> ---&gt; Package libfwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: libfwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Finished Dependency Resolution<br> fwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems<br>   --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> libfwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems<br>   --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br>  You could try using --skip-broken to work around the problem<br>  You could try running: package-cleanup --problems<br>                         package-cleanup --dupes<br>                         rpm -Va --nofiles --nodigest<br> (tigger3 pts8) #<br> <br> Regards,<br> <br> --<br> Tom Diehl       <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=2" target="_top" rel="nofollow">tdiehl@...</a>      Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=3" target="_top" rel="nofollow">mtd123@...</a><br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> trial. Simplify your report design, integration and deployment - and focus on<br> what you do best, core application coding. Discover what&#39;s new with<br> Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> </blockquote></div><br></div> </div></div></blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26570089&i=5" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26569103 2009-11-29T19:26:33Z 2009-11-29T19:26:33Z Aruna Muppalla  Hi, <br><br>   Is it possible to import Cisco PIX or ASA  firewall rules into fwbuilder? <br>I tried with built in policy importer<b> </b>(File/Import Policy). It didn&#39;t work. <br>Any help on this is greatly appreciated.<b><br> <br></b>thanks,<br>Aruna<b><br><br></b> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26569103&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26556961 2009-11-28T13:02:54Z 2009-11-28T13:02:54Z Vadim Kurland ✎ <div><br></div>I meant to do this, but it just slipped through cracks. In fact, I am going to start download right now. It should take me some time to set up the VM and such but rpms should be ready in a couple of days. It will be v3.0.8<div> <br>--vk</div><div><br><div class="gmail_quote">On Sat, Nov 28, 2009 at 12:50 PM, Tom Diehl <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556961&i=0" target="_top" rel="nofollow">tdiehl@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> Hi,<br> <br> Are their plans to provide rpms for Fedora 12? I tried to install the F11<br> rpms but I get missing dep errors. In case it is useful, the yum transaction is<br> below.<br> <br> (tigger3 pts8) # yum install fwbuilder-3.0.7-b1477.fc11<br> Loaded plugins: presto, refresh-packagekit<br> adobe-linux-i386                                                                                                                                                                                                      |  951 B     00:00<br> adobe-linux-i386/primary                                                                                                                                                                                              |  12 kB     00:00<br> adobe-linux-i386                                                                                                                                                                                                                       17/17<br> fedora                                                                                                                                                                                                                | 4.2 kB     00:00<br> fedora/primary_db                                                                                                                                                                                                     |  12 MB     00:01<br> fwbuilder                                                                                                                                                                                                             |  951 B     00:00<br> fwbuilder/primary                                                                                                                                                                                                     | 1.6 kB     00:00<br> fwbuilder                                                                                                                                                                                                                                2/2<br> rpmfusion-free                                                                                                                                                                                                        | 3.8 kB     00:00<br> rpmfusion-free/primary_db                                                                                                                                                                                             | 344 kB     00:00<br> rpmfusion-free-updates                                                                                                                                                                                                | 3.3 kB     00:00<br> rpmfusion-free-updates/primary_db                                                                                                                                                                                     | 3.0 kB     00:00<br> rpmfusion-nonfree                                                                                                                                                                                                     | 3.3 kB     00:00<br> rpmfusion-nonfree/primary_db                                                                                                                                                                                          |  91 kB     00:00<br> rpmfusion-nonfree-updates                                                                                                                                                                                             | 3.8 kB     00:00<br> rpmfusion-nonfree-updates/primary_db                                                                                                                                                                                  | 1.1 kB     00:00<br> updates                                                                                                                                                                                                               | 4.4 kB     00:00<br> updates/primary_db                                                                                                                                                                                                    | 547 kB     00:00<br> Setting up Install Process<br> Resolving Dependencies<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libfwbuilder = 3.0.7 for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwcompiler.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libfwbuilder.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Running transaction check<br> ---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64<br> ---&gt; Package libfwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated<br> --&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: libfwbuilder-3.0.7-b1477.fc11.x86_64<br> --&gt; Finished Dependency Resolution<br> fwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems<br>   --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> libfwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems<br>   --&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br> Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder)<br>  You could try using --skip-broken to work around the problem<br>  You could try running: package-cleanup --problems<br>                         package-cleanup --dupes<br>                         rpm -Va --nofiles --nodigest<br> (tigger3 pts8) #<br> <br> Regards,<br> <br> --<br> Tom Diehl       <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556961&i=1" target="_top" rel="nofollow">tdiehl@...</a>      Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556961&i=2" target="_top" rel="nofollow">mtd123@...</a><br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> trial. Simplify your report design, integration and deployment - and focus on<br> what you do best, core application coding. Discover what&#39;s new with<br> Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556961&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> </blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556961&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26556869 2009-11-28T12:50:16Z 2009-11-28T12:50:16Z Tom Diehl Hi, <br><br>Are their plans to provide rpms for Fedora 12? I tried to install the F11 <br>rpms but I get missing dep errors. In case it is useful, the yum transaction is <br>below. <br><br>(tigger3 pts8) # yum install fwbuilder-3.0.7-b1477.fc11 <br>Loaded plugins: presto, refresh-packagekit <br>adobe-linux-i386 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;951 B &nbsp; &nbsp; 00:00 <br>adobe-linux-i386/primary &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;12 kB &nbsp; &nbsp; 00:00 <br>adobe-linux-i386 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 17/17 <br>fedora &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 4.2 kB &nbsp; &nbsp; 00:00 <br>fedora/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | &nbsp;12 MB &nbsp; &nbsp; 00:01 <br>fwbuilder &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | &nbsp;951 B &nbsp; &nbsp; 00:00 <br>fwbuilder/primary &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 1.6 kB &nbsp; &nbsp; 00:00 <br>fwbuilder &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2/2 <br>rpmfusion-free &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 3.8 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-free/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 344 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-free-updates &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 3.3 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-free-updates/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.0 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-nonfree &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.3 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-nonfree/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| &nbsp;91 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-nonfree-updates &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 3.8 kB &nbsp; &nbsp; 00:00 <br>rpmfusion-nonfree-updates/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 1.1 kB &nbsp; &nbsp; 00:00 <br>updates &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; | 4.4 kB &nbsp; &nbsp; 00:00 <br>updates/primary_db &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;| 547 kB &nbsp; &nbsp; 00:00 <br>Setting up Install Process <br>Resolving Dependencies <br>--&gt; Running transaction check <br>---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>--&gt; Processing Dependency: libfwbuilder = 3.0.7 for package: fwbuilder-3.0.7-b1477.fc11.x86_64 <br>--&gt; Processing Dependency: libfwcompiler.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64 <br>--&gt; Processing Dependency: libfwbuilder.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64 <br>--&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64 <br>--&gt; Running transaction check <br>---&gt; Package fwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>--&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: fwbuilder-3.0.7-b1477.fc11.x86_64 <br>---&gt; Package libfwbuilder.x86_64 0:3.0.7-b1477.fc11 set to be updated <br>--&gt; Processing Dependency: libcrypto.so.8()(64bit) for package: libfwbuilder-3.0.7-b1477.fc11.x86_64 <br>--&gt; Finished Dependency Resolution <br>fwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems <br>&nbsp; &nbsp;--&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>libfwbuilder-3.0.7-b1477.fc11.x86_64 from fwbuilder has depsolving problems <br>&nbsp; &nbsp;--&gt; Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package fwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>Error: Missing Dependency: libcrypto.so.8()(64bit) is needed by package libfwbuilder-3.0.7-b1477.fc11.x86_64 (fwbuilder) <br>&nbsp; You could try using --skip-broken to work around the problem <br>&nbsp; You could try running: package-cleanup --problems <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;package-cleanup --dupes <br>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;rpm -Va --nofiles --nodigest <br>(tigger3 pts8) # <br><br>Regards, <br><br>-- <br>Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556869&i=0" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556869&i=1" target="_top" rel="nofollow">mtd123@...</a> <br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26556869&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26548738 2009-11-27T14:32:10Z 2009-11-27T14:32:10Z Vadim Kurland ✎ <div><br></div>rule &quot;-1&quot; is added automatically when you check checkbox &quot;drop packets that do not match any known state&quot; in the firewall object dialog. This uses iptables module state, state &quot;INVALID&quot;. Now, I can not tell why iptables can not match these packets to any known state. Is the rule that permit pings stateful ? It should be, because if it is stateless, then you need to explicitly add another rule manually to permit ping replies. <div> <br></div><div>Try to un-check the checkbox &quot;drop packets that do not match any known state&quot; and see if this helps.</div><div><br></div><div>--vk</div><div><br><div><br><br></div><div><br><div class="gmail_quote"> On Fri, Nov 27, 2009 at 1:40 PM, Seann Clark <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548738&i=0" target="_top" rel="nofollow">nombrandue@...</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> All,<br> <br> <br>    I have been fighting with the rules on one of my firewalls for a few<br> months now to no avail. Google returns nothing on this either, I am<br> trying to figure out why try traffic that I have allowed in the top of<br> my rule base is denied by a rule listed as -1 in the logs.  What I have<br> going on here is a VPN router that is located on the same subnet as the<br> rest of my computers and from the far side of this VPN users aren&#39;t able<br> to connect, or even ping, services on my side of the VPN. They will get<br> one ping and the rest fail. As previously mentioned, this is allowed at<br> the very top of my ruleset. An example of my logs are as follows:<br> <br> Nov 27 15:22:44 yuki RULE 4 -- ACCEPT  IN=eth0 OUT=eth0<br> MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00  SRC=192.168.10.38<br> DST=192.168.13.34 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=5846 PROTO=ICMP<br> TYPE=8 CODE=0 ID=1 SEQ=476<br> Nov 27 15:22:45 yuki RULE 4 -- ACCEPT  IN=eth0 OUT=eth0<br> MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00  SRC=192.168.10.38<br> DST=192.168.13.34 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=5894 PROTO=ICMP<br> TYPE=8 CODE=0 ID=1 SEQ=477<br> Nov 27 15:23:11 yuki RULE -1 -- DENY  IN=eth0 OUT=eth0<br> MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00  SRC=192.168.10.38<br> DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7063 PROTO=ICMP<br> TYPE=0 CODE=0 ID=1 SEQ=310<br> Nov 27 15:23:16 yuki RULE -1 -- DENY  IN=eth0 OUT=eth0<br> MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00  SRC=192.168.10.38<br> DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7269 PROTO=ICMP<br> TYPE=0 CODE=0 ID=1 SEQ=311<br> Nov 27 15:23:21 yuki RULE -1 -- DENY  IN=eth0 OUT=eth0<br> MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00  SRC=192.168.10.38<br> DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7493 PROTO=ICMP<br> TYPE=0 CODE=0 ID=1 SEQ=312<br> <br> <br> Those denies are on responses back out to the distant end, but I can<br> ping out to that system no problem, as the first few rules show. Rule 4<br> is me to them, rule 5 is them to me. This firewall is part of an OSPF<br> network internally, and is the default gateway for my network with<br> static routes to point back to the VPN router. I have a Deny Any that is<br> logged as well on this system but that deny above isn&#39;t part of any<br> rules I have set up.<br> <br> <br> FWbuilder version: 2.1.16<br> Kernel version:  Linux <a href="http://yuki.tsukinokage.net" target="_blank" rel="nofollow">yuki.tsukinokage.net</a> 2.6.26.8-57.fc8 #1 SMP Thu<br> Dec 18 19:19:45 EST 2008 i686 i686 i386 GNU/Linux<br> <br> <br> <br> Thanks in advance,<br> Seann Clark<br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> trial. Simplify your report design, integration and deployment - and focus on<br> what you do best, core application coding. Discover what&#39;s new with<br> Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548738&i=1" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> </blockquote></div><br></div></div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548738&i=2" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26548853 2009-11-27T14:27:13Z 2009-11-27T14:27:13Z Trey Nolen-2 I personally like bridging the firewalls. That has the disadvantage of <br>not maintaining established sessions but it is very easy to implement <br>and it is also very quick to failover. &nbsp;Two bridging firewalls between <br>two switches will use the spanning tree protocol to automatically <br>reroute everything on failure with no extra configuration. <br><br><br>Trey Nolen <br><br><br>On Fri, 2009-11-27 at 15:19 -0700, Frank Tanner wrote: <div class='shrinkable-quote'><br>&gt; On Sat, 2009-11-28 at 00:06 +0530, bagwemanisha wrote: <br>&gt; &gt; Hi , <br>&gt; &gt; &nbsp; <br>&gt; &gt; Can you help me with configuration document for configuring for HA <br>&gt; &gt; Firewalls -operating system Fedora or centos . I need to update both <br>&gt; &gt; firewalls simultaneously so that when one firewall go down <br>&gt; &gt; automatically the other firewall becomes live . <br>&gt; &gt; &nbsp; <br>&gt; &gt; Thanks in advance <br>&gt; <br>&gt; You can use Heatrbeat for keeping track of the active/passive nodes of <br>&gt; the firewalls and use incron to copy over configurations as they change. <br>&gt; <br>&gt; &gt; &nbsp; <br>&gt; &gt; Regards, <br>&gt; &gt; Maneesha <br>&gt; &gt; ------------------------------------------------------------------------------ <br>&gt; &gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>&gt; &gt; trial. Simplify your report design, integration and deployment - and focus on <br>&gt; &gt; what you do best, core application coding. Discover what's new with <br>&gt; &gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>&gt; &gt; _______________________________________________ Fwbuilder-discussion mailing list <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548853&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br>&gt; <br>&gt; </div><br><br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548853&i=1" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26548550 2009-11-27T14:19:10Z 2009-11-27T14:19:10Z Frank Tanner <br>On Sat, 2009-11-28 at 00:06 +0530, bagwemanisha wrote: <br>&gt; Hi , <br>&gt; &nbsp; <br>&gt; Can you help me with configuration document for configuring for HA <br>&gt; Firewalls -operating system Fedora or centos . I need to update both <br>&gt; firewalls simultaneously so that when one firewall go down <br>&gt; automatically the other firewall becomes live . <br>&gt; &nbsp; <br>&gt; Thanks in advance <br><br>You can use Heatrbeat for keeping track of the active/passive nodes of <br>the firewalls and use incron to copy over configurations as they change. <br><br>&gt; &nbsp; <br>&gt; Regards, <br>&gt; Maneesha <br>&gt; ------------------------------------------------------------------------------ <br>&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>&gt; trial. Simplify your report design, integration and deployment - and focus on <br>&gt; what you do best, core application coding. Discover what's new with <br>&gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>&gt; _______________________________________________ Fwbuilder-discussion mailing list <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548550&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><br><br>-- <br><br>--------------------------------------------------- <br>Frank Tanner III (<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548550&i=1" target="_top" rel="nofollow">pctech@...</a>) <br><br>ICQ: &nbsp;1730844 <br>AIM: &nbsp;KalokSundancer <br>MSN: &nbsp;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548550&i=2" target="_top" rel="nofollow">pctech@...</a> <br>YIM: &nbsp;fbtanner <br><br><br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548550&i=3" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26548100 2009-11-27T13:40:21Z 2009-11-27T13:40:21Z Seann Clark All, <br><br><br>&nbsp; &nbsp; I have been fighting with the rules on one of my firewalls for a few <br>months now to no avail. Google returns nothing on this either, I am <br>trying to figure out why try traffic that I have allowed in the top of <br>my rule base is denied by a rule listed as -1 in the logs. &nbsp;What I have <br>going on here is a VPN router that is located on the same subnet as the <br>rest of my computers and from the far side of this VPN users aren't able <br>to connect, or even ping, services on my side of the VPN. They will get <br>one ping and the rest fail. As previously mentioned, this is allowed at <br>the very top of my ruleset. An example of my logs are as follows: <br><br>Nov 27 15:22:44 yuki RULE 4 -- ACCEPT &nbsp;IN=eth0 OUT=eth0 <br>MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00 &nbsp;SRC=192.168.10.38 <br>DST=192.168.13.34 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=5846 PROTO=ICMP <br>TYPE=8 CODE=0 ID=1 SEQ=476 <br>Nov 27 15:22:45 yuki RULE 4 -- ACCEPT &nbsp;IN=eth0 OUT=eth0 <br>MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00 &nbsp;SRC=192.168.10.38 <br>DST=192.168.13.34 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=5894 PROTO=ICMP <br>TYPE=8 CODE=0 ID=1 SEQ=477 <br>Nov 27 15:23:11 yuki RULE -1 -- DENY &nbsp;IN=eth0 OUT=eth0 <br>MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00 &nbsp;SRC=192.168.10.38 <br>DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7063 PROTO=ICMP <br>TYPE=0 CODE=0 ID=1 SEQ=310 <br>Nov 27 15:23:16 yuki RULE -1 -- DENY &nbsp;IN=eth0 OUT=eth0 <br>MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00 &nbsp;SRC=192.168.10.38 <br>DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7269 PROTO=ICMP <br>TYPE=0 CODE=0 ID=1 SEQ=311 <br>Nov 27 15:23:21 yuki RULE -1 -- DENY &nbsp;IN=eth0 OUT=eth0 <br>MAC=00:15:60:a3:c0:e1:00:1b:77:c4:ec:2e:08:00 &nbsp;SRC=192.168.10.38 <br>DST=192.168.13.35 LEN=60 TOS=00 PREC=0x00 TTL=127 ID=7493 PROTO=ICMP <br>TYPE=0 CODE=0 ID=1 SEQ=312 <br><br><br>Those denies are on responses back out to the distant end, but I can <br>ping out to that system no problem, as the first few rules show. Rule 4 <br>is me to them, rule 5 is them to me. This firewall is part of an OSPF <br>network internally, and is the default gateway for my network with <br>static routes to point back to the VPN router. I have a Deny Any that is <br>logged as well on this system but that deny above isn't part of any <br>rules I have set up. <br><br><br>FWbuilder version: 2.1.16 <br>Kernel version: &nbsp;Linux yuki.tsukinokage.net 2.6.26.8-57.fc8 #1 SMP Thu <br>Dec 18 19:19:45 EST 2008 i686 i686 i386 GNU/Linux <br><br><br><br>Thanks in advance, <br>Seann Clark <br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26548100&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26546394 2009-11-27T10:36:39Z 2009-11-27T10:36:39Z maneesha <div>Hi ,</div> <div> </div> <div>Can you help me with configuration document for configuring for HA Firewalls -operating system Fedora or centos . I need to update both firewalls simultaneously so that when one firewall go down automatically the other firewall becomes live .</div> <div> </div> <div>Thanks in advance</div> <div> </div> <div>Regards,</div> <div>Maneesha</div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26546394&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26474049 2009-11-23T00:07:43Z 2009-11-23T00:07:43Z Joost Wolthuis Me too in favour of the undo function/button <br><br><br>Joost <br><br><br><br><br>-----Original Message----- <br>From: Tom Diehl [mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=0" target="_top" rel="nofollow">tdiehl@...</a>] <br>Sent: maandag 23 november 2009 2:42 <br>To: <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=1" target="_top" rel="nofollow">fwbuilder-discussion@...</a> <br>Subject: Re: [Fwbuilder-discussion] Opinion poll <br><br>On Sun, 15 Nov 2009, <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=2" target="_top" rel="nofollow">phall@...</a> wrote: <br><br>&gt; We use fwbuilder with RCS and always have it configured to save <br>&gt; automatically. &nbsp;I think the undo concept you describe with immediate <br>&gt; effect is the way to go. <br><br>I too use it this way. I have on numerous occasions wished for an undo <br>button <br>or command. So +1 for the immediate save with &lt;ctrl&gt; Z. <br><br><br>Regards, <br><br>-- <br>Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=3" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=4" target="_top" rel="nofollow">mtd123@...</a> <br><br><br>&gt; <br>&gt; -price <br>&gt; <br>&gt; Quoting Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=5" target="_top" rel="nofollow">vadim@...</a>&gt;: <br>&gt; <br>&gt;&gt; Hi all, <br>&gt;&gt; <br>&gt;&gt; We are actively working on Undo for the Firewall Builder v4.0 GUI and <br>we <br>&gt;&gt; think of changing the way object editor operates to make it more <br>logical and <br>&gt;&gt; easier integrated with Undo facility. The idea is to make the editor <br>apply <br>&gt;&gt; changes to the object's attribute immediately when user types <br>something in <br>&gt;&gt; the entry field and hits Enter or switches focus to another entry <br>field. The <br>&gt;&gt; &quot;Apply&quot; button will be removed if this is done. You &nbsp;just edit a name <br>or <br>&gt;&gt; comment or port number etc and hit Enter and it is saved right away <br>into the <br>&gt;&gt; object and also added to the Undo stack so you can roll it back using <br>&gt;&gt; Ctrl-Z. This is standard behavior, this is how many other programs <br>work. <br>&gt;&gt; <br>&gt;&gt; The alternative is to switch to the modal dialog for the editor, but <br>that <br>&gt;&gt; seems very intrusive and requires lot more clicks to edit something. <br>If it <br>&gt;&gt; is modal, it won't let you do anything else until you finish your <br>changes <br>&gt;&gt; and hit Cancel or Apply. I do not like this idea, but I like the <br>first idea <br>&gt;&gt; much better (when changes are applied immediately when you hit Enter <br>or <div class='shrinkable-quote'><br>&gt;&gt; switch focus). <br>&gt;&gt; <br>&gt;&gt; What do you think ? <br>&gt;&gt; <br>&gt;&gt; --vk <br>&gt;&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; </div>------------------------------------------------------------------------ <br>------ <br>&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 <br>30-Day <br>&gt; trial. Simplify your report design, integration and deployment - and <br>focus on <br>&gt; what you do best, core application coding. Discover what's new with <br>&gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>&gt; _______________________________________________ <br>&gt; Fwbuilder-discussion mailing list <br>&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=6" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br>&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br>&gt; <br><br>------------------------------------------------------------------------ <br>------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 <br>30-Day <br>trial. Simplify your report design, integration and deployment - and <br>focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=7" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26474049&i=8" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26471785 2009-11-22T17:42:29Z 2009-11-22T17:42:29Z Tom Diehl On Sun, 15 Nov 2009, <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=0" target="_top" rel="nofollow">phall@...</a> wrote: <br><br>&gt; We use fwbuilder with RCS and always have it configured to save <br>&gt; automatically. &nbsp;I think the undo concept you describe with immediate <br>&gt; effect is the way to go. <br><br>I too use it this way. I have on numerous occasions wished for an undo button <br>or command. So +1 for the immediate save with &lt;ctrl&gt; Z. <br><br><br>Regards, <br><br>-- <br>Tom Diehl &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=1" target="_top" rel="nofollow">tdiehl@...</a> &nbsp; &nbsp; &nbsp;Spamtrap address <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=2" target="_top" rel="nofollow">mtd123@...</a> <br><br><div class='shrinkable-quote'><br>&gt; <br>&gt; -price <br>&gt; <br>&gt; Quoting Vadim Kurland &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=3" target="_top" rel="nofollow">vadim@...</a>&gt;: <br>&gt; <br>&gt;&gt; Hi all, <br>&gt;&gt; <br>&gt;&gt; We are actively working on Undo for the Firewall Builder v4.0 GUI and we <br>&gt;&gt; think of changing the way object editor operates to make it more logical and <br>&gt;&gt; easier integrated with Undo facility. The idea is to make the editor apply <br>&gt;&gt; changes to the object's attribute immediately when user types something in <br>&gt;&gt; the entry field and hits Enter or switches focus to another entry field. The <br>&gt;&gt; &quot;Apply&quot; button will be removed if this is done. You &nbsp;just edit a name or <br>&gt;&gt; comment or port number etc and hit Enter and it is saved right away into the <br>&gt;&gt; object and also added to the Undo stack so you can roll it back using <br>&gt;&gt; Ctrl-Z. This is standard behavior, this is how many other programs work. <br>&gt;&gt; <br>&gt;&gt; The alternative is to switch to the modal dialog for the editor, but that <br>&gt;&gt; seems very intrusive and requires lot more clicks to edit something. If it <br>&gt;&gt; is modal, it won't let you do anything else until you finish your changes <br>&gt;&gt; and hit Cancel or Apply. I do not like this idea, but I like the first idea <br>&gt;&gt; much better (when changes are applied immediately when you hit Enter or <br>&gt;&gt; switch focus). <br>&gt;&gt; <br>&gt;&gt; What do you think ? <br>&gt;&gt; <br>&gt;&gt; --vk <br>&gt;&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; <br>&gt; ------------------------------------------------------------------------------ <br>&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>&gt; trial. Simplify your report design, integration and deployment - and focus on <br>&gt; what you do best, core application coding. Discover what's new with <br>&gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>&gt; _______________________________________________ <br>&gt; Fwbuilder-discussion mailing list <br>&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=4" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br>&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br>&gt; </div><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26471785&i=5" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26454817 2009-11-21T01:12:58Z 2009-11-21T01:12:58Z Dick Middleton-3 Vadim Kurland wrote: <br><br>&gt; To be honest, this does not represent great users participation since <br>&gt; only 14 people participated in the discussion out of 400+ subscribers of <br>&gt; the list, but this is what we have to work with. <br><br>Don't be despondent, I suspect the 386+ non-voters have no strong <br>preference. They probably feel they can trust you to do the right thing; <br>after all, you have done an outstanding job so far. <br><br>Dick <br><br><br><br><br>------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br>_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26454817&i=0" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26452163 2009-11-20T15:51:28Z 2009-11-20T15:51:28Z Vadim Kurland ✎ <div><br></div>It is Friday and I promised to post results by the end of the day Tuesday. Lets just say I gave it few more days, in case someone reads mailing list in a digest and wanted to reply.<div><br></div><div>Final vote count is as follows:</div> <div><br></div><div>&quot;For&quot; the idea to get rid of the &quot;Apply&quot; button and apply changes made in the dialog to the object immediately:</div><div><br></div><div>10</div><div><br></div><div>&quot;Against&quot; that and &quot;for&quot; the idea of turning object editor into a modal dialog:</div> <div><br></div><div>4</div><div><br></div><div>To be honest, this does not represent great users participation since only 14 people participated in the discussion out of 400+ subscribers of the list, but this is what we have to work with.</div> <div><br></div><div>Immediate apply option it is going to be. I can promise to add some safeguards against accidental changes. It is hard to make full-proof but I hope a scrolling &quot;changelog&quot;-like window will help. I am going to have a test build available in a few of days. The Undo feature progresses well but we still need to do a lot of work there.</div> <div><br></div><div>--vk</div><div><br><br><div class="gmail_quote">On Sun, Nov 15, 2009 at 9:29 AM, Vadim Kurland <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26452163&i=0" target="_top" rel="nofollow">vadim@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Hi all,<div><br></div><div><span style="font-family:arial, sans-serif;font-size:13px;border-collapse:collapse"><div>We are actively working on Undo for the Firewall Builder v4.0 GUI and we think of changing the way object editor operates to make it more logical and easier integrated with Undo facility. The idea is to make the editor apply changes to the object&#39;s attribute immediately when user types something in the entry field and hits Enter or switches focus to another entry field. The &quot;Apply&quot; button will be removed if this is done. You  just edit a name or comment or port number etc and hit Enter and it is saved right away into the object and also added to the Undo stack so you can roll it back using Ctrl-Z. This is standard behavior, this is how many other programs work.</div> <div><br></div><div>The alternative is to switch to the modal dialog for the editor, but that seems very intrusive and requires lot more clicks to edit something. If it is modal, it won&#39;t let you do anything else until you finish your changes and hit Cancel or Apply. I do not like this idea, but I like the first idea much better (when changes are applied immediately when you hit Enter or switch focus).</div> <div><br></div><div>What do you think ?</div><div><br></div><div>--vk</div><div><br></div></span></div> </blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26452163&i=1" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26389711 2009-11-17T05:09:20Z 2009-11-17T05:09:20Z Chris E. Hendrickson <html><body bgcolor="#FFFFFF"><div>Sounds great to me.&nbsp;<br><br>On Nov 16, 2009, at 7:56 PM, "Vadim Kurland" &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=0" target="_top" rel="nofollow">vadim@...</a>&gt; wrote:<br><br></div><div></div><blockquote type="cite"><div><div><br></div>Here is an idea for a facility to help catch accidental changes:<div><br></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; "><div>I can add new docked window that would show objects modified in the current session. That is, you start the program and this window is blank. As you modify objects, their names appear in this window. If you modify an object twice, it will appear there only once (this is the difference between this window and undo stack display). We can't save this information to the data file for a number of technical reasons, so it will show only changes done since the program start. But I feel this can be a better way to catch accidental changes. Also, since it is going to be implemented as docked window, those who do not want it can simply close it.</div> <div><br></div><div>What do you think ?</div><div><br></div><div>--vk</div><div><br></div></span><br><div class="gmail_quote">On Mon, Nov 16, 2009 at 3:07 AM, Alexander Runge <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=1" target="_top" rel="nofollow">runge@...</a></a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Me too would favor the auto-apply option. Still I do share the concerns of<br> unwanted changes.<br> How about this one: before saving a ruleset you get a list of all<br> changes applied (the content of the<br> undo list) which can then be confirmed or rejected.<br> <br> alex<br> <br> <br> Chris E. Hendrickson schrieb:<br> <div class="im">&gt; I will toss in a vote for the immediate apply and undo (and redo?) as<br> &gt; well. Maybe a good compromise for the anti-auto-apply people might be<br> &gt; a setting to switch between the two behaviors.<br> &gt;<br> &gt; On Nov 15, 2009, at 5:55 PM, "Vadim Kurland" &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=2" target="_top" rel="nofollow">vadim@...</a></a><br> </div><div><div></div><div class="h5">&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=3" target="_top" rel="nofollow">vadim@...</a></a>&gt;&gt; wrote:<br> &gt;<br> &gt;&gt;<br> &gt;&gt; Chris, I see your point.<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; So far I have 4 "for" immediate saving of the changes and 1 "against" it.<br> &gt;&gt;<br> &gt;&gt; I need more votes to make the decision. We are trying to design the<br> &gt;&gt; Undo function in a such way that it would work regardless of the<br> &gt;&gt; editor design. So this opinion poll is not about how Undo should<br> &gt;&gt; work, it is about how the editor should work.<br> &gt;&gt;<br> &gt;&gt; To reiterate, there are two major ways to implement object editor:<br> &gt;&gt;<br> &gt;&gt; 1) You type in the input field in the editor, hit Enter or click on<br> &gt;&gt; another input field, and the change immediately saved into the object<br> &gt;&gt; and added to the Undo stack. You can roll changes back one by one.<br> &gt;&gt;<br> &gt;&gt; 2) the GUI offers small panel that shows object properties and has<br> &gt;&gt; button "Edit". Clicking on this button opens object editor in a modal<br> &gt;&gt; dialog, you can't do anything else until you click Cancel or OK in it.<br> &gt;&gt;<br> &gt;&gt; As I said, Undo will work either way. In the case (1) it will roll<br> &gt;&gt; back change done to one attribute of the object, while in case (2) it<br> &gt;&gt; will roll back all changes done in the editor while it was opened.<br> &gt;&gt;<br> &gt;&gt; Note that even in the case (1) changes made in the "advanced<br> &gt;&gt; settings" dialogs will be rolled back as a batch because these<br> &gt;&gt; dialogs are already modal.<br> &gt;&gt;<br> &gt;&gt; I am going to make final decision by the end of the day Tuesday (my<br> &gt;&gt; time, Pacific Time Zone) by counting votes cast for (1) or (2). &nbsp;The<br> &gt;&gt; 5 votes I have so far count, unless you guys want to change your mind.<br> &gt;&gt;<br> &gt;&gt; --vk<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; On Sun, Nov 15, 2009 at 1:57 PM, Chris Martin &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=4" target="_top" rel="nofollow">chris@...</a></a><br> </div></div><div class="im">&gt;&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=5" target="_top" rel="nofollow">chris@...</a></a>&gt;&gt; wrote:<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; Personally, I prefer the Modal Dialog Box<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; (1) It prevents accidental modification of the object<br> &gt;&gt; &nbsp; &nbsp; (2) It encourages you to "review" you setting before you select<br> &gt;&gt; &nbsp; &nbsp; "apply"<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; I find that I don't modify objects very often. &nbsp;Its the rule-set<br> &gt;&gt; &nbsp; &nbsp; that I am always changing, so an extra click or two in the object<br> &gt;&gt; &nbsp; &nbsp; editor is OK..<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; I find in X that there are many applications that could benefit<br> &gt;&gt; &nbsp; &nbsp; from Modal Dialog Boxes for editing<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; In my view, its best to display the object in a summary window,<br> &gt;&gt; &nbsp; &nbsp; with an edit button. &nbsp;The edit window should be modal. &nbsp;This way<br> &gt;&gt; &nbsp; &nbsp; no one forgets to apply changes. &nbsp;The display window takes less<br> &gt;&gt; &nbsp; &nbsp; screen space (good for use with net-books). &nbsp;The edit window<br> &gt;&gt; &nbsp; &nbsp; overlays the application, focusing attention of the object, and<br> &gt;&gt; &nbsp; &nbsp; forcing a commit.<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; My 2c worth<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; ----------------------------------------------------------<br> &gt;&gt; &nbsp; &nbsp; Chris Martin<br> &gt;&gt; &nbsp; &nbsp; m: 0419812371<br> &gt;&gt; &nbsp; &nbsp; ----------------------------------------------------------<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; On Mon, Nov 16, 2009 at 8:17 AM, Frank Tanner<br> </div><div><div></div><div class="h5">&gt;&gt; &nbsp; &nbsp; &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=6" target="_top" rel="nofollow">pctech@...</a></a> &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=7" target="_top" rel="nofollow">pctech@...</a></a>&gt;&gt; wrote:<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; On Sun, 2009-11-15 at 09:29 -0800, Vadim Kurland wrote:<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; Hi all,<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; We are actively working on Undo for the Firewall Builder<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; v4.0 GUI and<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; we think of changing the way object editor operates to make<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; it more<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; logical and easier integrated with Undo facility. The idea<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; is to make<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; the editor apply changes to the object's attribute<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; immediately when<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; user types something in the entry field and hits Enter or<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; switches<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; focus to another entry field. The "Apply" button will be<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; removed if<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; this is done. You &nbsp;just edit a name or comment or port<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; number etc and<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; hit Enter and it is saved right away into the object and<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; also added to<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; the Undo stack so you can roll it back using Ctrl-Z. This<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; is standard<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; behavior, this is how many other programs work.<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; The alternative is to switch to the modal dialog for the<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; editor, but<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; that seems very intrusive and requires lot more clicks to edit<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; something. If it is modal, it won't let you do anything<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; else until you<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; finish your changes and hit Cancel or Apply. I do not like<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; this idea,<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; but I like the first idea much better (when changes are applied<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; immediately when you hit Enter or switch focus).<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; What do you think ?<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; I like the first idea as well.<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; --vk<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; ------------------------------------------------------------------------------<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; Let Crystal Reports handle the reporting - Free Crystal<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Reports 2008 30-Day<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; trial. Simplify your report design, integration and<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; deployment - and focus on<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; what you do best, core application coding. Discover what's<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; new with<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &gt; _______________________________________________<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Fwbuilder-discussion mailing list<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=8" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> </div></div>&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=9" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a>&gt;<br> <div class="im">&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; --<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; ---------------------------------------------------<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Frank Tanner III (<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=10" target="_top" rel="nofollow">pctech@...</a></a><br> </div>&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=11" target="_top" rel="nofollow">pctech@...</a></a>&gt;)<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; ICQ: &nbsp;1730844<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; AIM: &nbsp;KalokSundancer<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; MSN: &nbsp;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=12" target="_top" rel="nofollow">pctech@...</a></a> &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=13" target="_top" rel="nofollow">pctech@...</a></a>&gt;<br> <div class="im">&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; YIM: &nbsp;fbtanner<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; ------------------------------------------------------------------------------<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Let Crystal Reports handle the reporting - Free Crystal<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Reports 2008 30-Day<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; trial. Simplify your report design, integration and<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; deployment - and focus on<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; what you do best, core application coding. Discover what's<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; new with<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; _______________________________________________<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; Fwbuilder-discussion mailing list<br> &gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=14" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> </div>&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=15" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a>&gt;<br> <div class="im">&gt;&gt; &nbsp; &nbsp; &nbsp; &nbsp; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; &nbsp; &nbsp; ------------------------------------------------------------------------------<br> &gt;&gt; &nbsp; &nbsp; Let Crystal Reports handle the reporting - Free Crystal Reports<br> &gt;&gt; &nbsp; &nbsp; 2008 30-Day<br> &gt;&gt; &nbsp; &nbsp; trial. Simplify your report design, integration and deployment -<br> &gt;&gt; &nbsp; &nbsp; and focus on<br> &gt;&gt; &nbsp; &nbsp; what you do best, core application coding. Discover what's new with<br> &gt;&gt; &nbsp; &nbsp; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> &gt;&gt; &nbsp; &nbsp; _______________________________________________<br> &gt;&gt; &nbsp; &nbsp; Fwbuilder-discussion mailing list<br> &gt;&gt; &nbsp; &nbsp; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=16" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> </div>&gt;&gt; &nbsp; &nbsp; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=17" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a>&gt;<br> <div class="im">&gt;&gt; &nbsp; &nbsp; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; ------------------------------------------------------------------------------<br> &gt;&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008<br> &gt;&gt; 30-Day<br> &gt;&gt; trial. Simplify your report design, integration and deployment - and<br> &gt;&gt; focus on<br> &gt;&gt; what you do best, core application coding. Discover what's new with<br> &gt;&gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> &gt;&gt; _______________________________________________<br> &gt;&gt; Fwbuilder-discussion mailing list<br> &gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=18" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> </div>&gt;&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=19" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a>&gt;<br> <div><div></div><div class="h5">&gt;&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> &gt; ------------------------------------------------------------------------<br> &gt;<br> &gt; ------------------------------------------------------------------------------<br> &gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> &gt; trial. Simplify your report design, integration and deployment - and focus on<br> &gt; what you do best, core application coding. Discover what's new with<br> &gt; Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> &gt; ------------------------------------------------------------------------<br> &gt;<br> &gt; _______________________________________________<br> &gt; Fwbuilder-discussion mailing list<br> &gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=20" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> &gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> &gt;<br> <br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> trial. Simplify your report design, integration and deployment - and focus on<br> what you do best, core application coding. Discover what's new with<br> Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=21" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow"><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></a><br> </div></div></blockquote></div><br></div> </div></blockquote><blockquote type="cite"><div><span>------------------------------------------------------------------------------</span><br><span>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day </span><br><span>trial. Simplify your report design, integration and deployment - and focus on </span><br><span>what you do best, core application coding. Discover what's new with</span><br><span>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow"><a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a></a></span></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Fwbuilder-discussion mailing list</span><br><span><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=22" target="_top" rel="nofollow">Fwbuilder-discussion@...</a></span><br><span><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a></span><br></div></blockquote></body></html><br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26389711&i=23" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p> tag:old.nabble.com,2006:post-26382622 2009-11-16T16:51:20Z 2009-11-16T16:51:20Z Vadim Kurland ✎ <div><br></div>Here is an idea for a facility to help catch accidental changes:<div><br></div><div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px; border-collapse: collapse; "><div>I can add new docked window that would show objects modified in the current session. That is, you start the program and this window is blank. As you modify objects, their names appear in this window. If you modify an object twice, it will appear there only once (this is the difference between this window and undo stack display). We can&#39;t save this information to the data file for a number of technical reasons, so it will show only changes done since the program start. But I feel this can be a better way to catch accidental changes. Also, since it is going to be implemented as docked window, those who do not want it can simply close it.</div> <div><br></div><div>What do you think ?</div><div><br></div><div>--vk</div><div><br></div></span><br><div class="gmail_quote">On Mon, Nov 16, 2009 at 3:07 AM, Alexander Runge <span dir="ltr">&lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=0" target="_top" rel="nofollow">runge@...</a>&gt;</span> wrote:<br> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Me too would favor the auto-apply option. Still I do share the concerns of<br> unwanted changes.<br> How about this one: before saving a ruleset you get a list of all<br> changes applied (the content of the<br> undo list) which can then be confirmed or rejected.<br> <br> alex<br> <br> <br> Chris E. Hendrickson schrieb:<br> <div class="im">&gt; I will toss in a vote for the immediate apply and undo (and redo?) as<br> &gt; well. Maybe a good compromise for the anti-auto-apply people might be<br> &gt; a setting to switch between the two behaviors.<br> &gt;<br> &gt; On Nov 15, 2009, at 5:55 PM, &quot;Vadim Kurland&quot; &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=1" target="_top" rel="nofollow">vadim@...</a><br> </div><div><div></div><div class="h5">&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=2" target="_top" rel="nofollow">vadim@...</a>&gt;&gt; wrote:<br> &gt;<br> &gt;&gt;<br> &gt;&gt; Chris, I see your point.<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; So far I have 4 &quot;for&quot; immediate saving of the changes and 1 &quot;against&quot; it.<br> &gt;&gt;<br> &gt;&gt; I need more votes to make the decision. We are trying to design the<br> &gt;&gt; Undo function in a such way that it would work regardless of the<br> &gt;&gt; editor design. So this opinion poll is not about how Undo should<br> &gt;&gt; work, it is about how the editor should work.<br> &gt;&gt;<br> &gt;&gt; To reiterate, there are two major ways to implement object editor:<br> &gt;&gt;<br> &gt;&gt; 1) You type in the input field in the editor, hit Enter or click on<br> &gt;&gt; another input field, and the change immediately saved into the object<br> &gt;&gt; and added to the Undo stack. You can roll changes back one by one.<br> &gt;&gt;<br> &gt;&gt; 2) the GUI offers small panel that shows object properties and has<br> &gt;&gt; button &quot;Edit&quot;. Clicking on this button opens object editor in a modal<br> &gt;&gt; dialog, you can&#39;t do anything else until you click Cancel or OK in it.<br> &gt;&gt;<br> &gt;&gt; As I said, Undo will work either way. In the case (1) it will roll<br> &gt;&gt; back change done to one attribute of the object, while in case (2) it<br> &gt;&gt; will roll back all changes done in the editor while it was opened.<br> &gt;&gt;<br> &gt;&gt; Note that even in the case (1) changes made in the &quot;advanced<br> &gt;&gt; settings&quot; dialogs will be rolled back as a batch because these<br> &gt;&gt; dialogs are already modal.<br> &gt;&gt;<br> &gt;&gt; I am going to make final decision by the end of the day Tuesday (my<br> &gt;&gt; time, Pacific Time Zone) by counting votes cast for (1) or (2).  The<br> &gt;&gt; 5 votes I have so far count, unless you guys want to change your mind.<br> &gt;&gt;<br> &gt;&gt; --vk<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; On Sun, Nov 15, 2009 at 1:57 PM, Chris Martin &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=3" target="_top" rel="nofollow">chris@...</a><br> </div></div><div class="im">&gt;&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=4" target="_top" rel="nofollow">chris@...</a>&gt;&gt; wrote:<br> &gt;&gt;<br> &gt;&gt;     Personally, I prefer the Modal Dialog Box<br> &gt;&gt;<br> &gt;&gt;     (1) It prevents accidental modification of the object<br> &gt;&gt;     (2) It encourages you to &quot;review&quot; you setting before you select<br> &gt;&gt;     &quot;apply&quot;<br> &gt;&gt;<br> &gt;&gt;     I find that I don&#39;t modify objects very often.  Its the rule-set<br> &gt;&gt;     that I am always changing, so an extra click or two in the object<br> &gt;&gt;     editor is OK..<br> &gt;&gt;<br> &gt;&gt;     I find in X that there are many applications that could benefit<br> &gt;&gt;     from Modal Dialog Boxes for editing<br> &gt;&gt;<br> &gt;&gt;     In my view, its best to display the object in a summary window,<br> &gt;&gt;     with an edit button.  The edit window should be modal.  This way<br> &gt;&gt;     no one forgets to apply changes.  The display window takes less<br> &gt;&gt;     screen space (good for use with net-books).  The edit window<br> &gt;&gt;     overlays the application, focusing attention of the object, and<br> &gt;&gt;     forcing a commit.<br> &gt;&gt;<br> &gt;&gt;     My 2c worth<br> &gt;&gt;<br> &gt;&gt;     ----------------------------------------------------------<br> &gt;&gt;     Chris Martin<br> &gt;&gt;     m: 0419812371<br> &gt;&gt;     ----------------------------------------------------------<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;     On Mon, Nov 16, 2009 at 8:17 AM, Frank Tanner<br> </div><div><div></div><div class="h5">&gt;&gt;     &lt;<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=5" target="_top" rel="nofollow">pctech@...</a> &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=6" target="_top" rel="nofollow">pctech@...</a>&gt;&gt; wrote:<br> &gt;&gt;<br> &gt;&gt;         On Sun, 2009-11-15 at 09:29 -0800, Vadim Kurland wrote:<br> &gt;&gt;         &gt; Hi all,<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt; We are actively working on Undo for the Firewall Builder<br> &gt;&gt;         v4.0 GUI and<br> &gt;&gt;         &gt; we think of changing the way object editor operates to make<br> &gt;&gt;         it more<br> &gt;&gt;         &gt; logical and easier integrated with Undo facility. The idea<br> &gt;&gt;         is to make<br> &gt;&gt;         &gt; the editor apply changes to the object&#39;s attribute<br> &gt;&gt;         immediately when<br> &gt;&gt;         &gt; user types something in the entry field and hits Enter or<br> &gt;&gt;         switches<br> &gt;&gt;         &gt; focus to another entry field. The &quot;Apply&quot; button will be<br> &gt;&gt;         removed if<br> &gt;&gt;         &gt; this is done. You  just edit a name or comment or port<br> &gt;&gt;         number etc and<br> &gt;&gt;         &gt; hit Enter and it is saved right away into the object and<br> &gt;&gt;         also added to<br> &gt;&gt;         &gt; the Undo stack so you can roll it back using Ctrl-Z. This<br> &gt;&gt;         is standard<br> &gt;&gt;         &gt; behavior, this is how many other programs work.<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt; The alternative is to switch to the modal dialog for the<br> &gt;&gt;         editor, but<br> &gt;&gt;         &gt; that seems very intrusive and requires lot more clicks to edit<br> &gt;&gt;         &gt; something. If it is modal, it won&#39;t let you do anything<br> &gt;&gt;         else until you<br> &gt;&gt;         &gt; finish your changes and hit Cancel or Apply. I do not like<br> &gt;&gt;         this idea,<br> &gt;&gt;         &gt; but I like the first idea much better (when changes are applied<br> &gt;&gt;         &gt; immediately when you hit Enter or switch focus).<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt; What do you think ?<br> &gt;&gt;         &gt;<br> &gt;&gt;<br> &gt;&gt;         I like the first idea as well.<br> &gt;&gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt; --vk<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         &gt;<br> &gt;&gt;         ------------------------------------------------------------------------------<br> &gt;&gt;         &gt; Let Crystal Reports handle the reporting - Free Crystal<br> &gt;&gt;         Reports 2008 30-Day<br> &gt;&gt;         &gt; trial. Simplify your report design, integration and<br> &gt;&gt;         deployment - and focus on<br> &gt;&gt;         &gt; what you do best, core application coding. Discover what&#39;s<br> &gt;&gt;         new with<br> &gt;&gt;         &gt; Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> &gt;&gt;         &gt; _______________________________________________<br> &gt;&gt;         Fwbuilder-discussion mailing list<br> &gt;&gt;         <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=7" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> </div></div>&gt;&gt;         &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=8" target="_top" rel="nofollow">Fwbuilder-discussion@...</a>&gt;<br> <div class="im">&gt;&gt;         <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt;&gt;         --<br> &gt;&gt;<br> &gt;&gt;         ---------------------------------------------------<br> &gt;&gt;         Frank Tanner III (<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=9" target="_top" rel="nofollow">pctech@...</a><br> </div>&gt;&gt;         &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=10" target="_top" rel="nofollow">pctech@...</a>&gt;)<br> &gt;&gt;<br> &gt;&gt;         ICQ:  1730844<br> &gt;&gt;         AIM:  KalokSundancer<br> &gt;&gt;         MSN:  <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=11" target="_top" rel="nofollow">pctech@...</a> &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=12" target="_top" rel="nofollow">pctech@...</a>&gt;<br> <div class="im">&gt;&gt;         YIM:  fbtanner<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;         ------------------------------------------------------------------------------<br> &gt;&gt;         Let Crystal Reports handle the reporting - Free Crystal<br> &gt;&gt;         Reports 2008 30-Day<br> &gt;&gt;         trial. Simplify your report design, integration and<br> &gt;&gt;         deployment - and focus on<br> &gt;&gt;         what you do best, core application coding. Discover what&#39;s<br> &gt;&gt;         new with<br> &gt;&gt;         Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> &gt;&gt;         _______________________________________________<br> &gt;&gt;         Fwbuilder-discussion mailing list<br> &gt;&gt;         <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=13" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> </div>&gt;&gt;         &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=14" target="_top" rel="nofollow">Fwbuilder-discussion@...</a>&gt;<br> <div class="im">&gt;&gt;         <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt;     ------------------------------------------------------------------------------<br> &gt;&gt;     Let Crystal Reports handle the reporting - Free Crystal Reports<br> &gt;&gt;     2008 30-Day<br> &gt;&gt;     trial. Simplify your report design, integration and deployment -<br> &gt;&gt;     and focus on<br> &gt;&gt;     what you do best, core application coding. Discover what&#39;s new with<br> &gt;&gt;     Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> &gt;&gt;     _______________________________________________<br> &gt;&gt;     Fwbuilder-discussion mailing list<br> &gt;&gt;     <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=15" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> </div>&gt;&gt;     &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=16" target="_top" rel="nofollow">Fwbuilder-discussion@...</a>&gt;<br> <div class="im">&gt;&gt;     <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt;&gt;<br> &gt;&gt;<br> &gt;&gt; ------------------------------------------------------------------------------<br> &gt;&gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008<br> &gt;&gt; 30-Day<br> &gt;&gt; trial. Simplify your report design, integration and deployment - and<br> &gt;&gt; focus on<br> &gt;&gt; what you do best, core application coding. Discover what&#39;s new with<br> &gt;&gt; Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> &gt;&gt; _______________________________________________<br> &gt;&gt; Fwbuilder-discussion mailing list<br> &gt;&gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=17" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> </div>&gt;&gt; &lt;mailto:<a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=18" target="_top" rel="nofollow">Fwbuilder-discussion@...</a>&gt;<br> <div><div></div><div class="h5">&gt;&gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt; ------------------------------------------------------------------------<br> &gt;<br> &gt; ------------------------------------------------------------------------------<br> &gt; Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> &gt; trial. Simplify your report design, integration and deployment - and focus on<br> &gt; what you do best, core application coding. Discover what&#39;s new with<br> &gt; Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> &gt; ------------------------------------------------------------------------<br> &gt;<br> &gt; _______________________________________________<br> &gt; Fwbuilder-discussion mailing list<br> &gt; <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=19" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> &gt; <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> &gt;<br> <br> <br> ------------------------------------------------------------------------------<br> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day<br> trial. Simplify your report design, integration and deployment - and focus on<br> what you do best, core application coding. Discover what&#39;s new with<br> Crystal Reports now.  <a href="http://p.sf.net/sfu/bobj-july" target="_blank" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br> _______________________________________________<br> Fwbuilder-discussion mailing list<br> <a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=20" target="_top" rel="nofollow">Fwbuilder-discussion@...</a><br> <a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_blank" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br> </div></div></blockquote></div><br></div> <br />------------------------------------------------------------------------------ <br>Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day <br>trial. Simplify your report design, integration and deployment - and focus on <br>what you do best, core application coding. Discover what's new with <br>Crystal Reports now. &nbsp;<a href="http://p.sf.net/sfu/bobj-july" target="_top" rel="nofollow">http://p.sf.net/sfu/bobj-july</a><br />_______________________________________________ <br>Fwbuilder-discussion mailing list <br><a href="http://old.nabble.com/user/SendEmail.jtp?type=post&post=26382622&i=21" target="_top" rel="nofollow">Fwbuilder-discussion@...</a> <br><a href="https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion" target="_top" rel="nofollow">https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion</a><br><p>From forum: <a href="http://old.nabble.com/fwbuilder-discussion-f3514.html" embed="fixTarget[3514]" target="_top" >fwbuilder-discussion</a></p>