|

Computer Security

»

»

Firewall Builder

»

fwbuilder-discussion

Shadow Detection & Custom Rules

View: New views

3 Messages — Rating Filter: Alert me

	Shadow Detection & Custom Rules by Chris Martin-15 :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message I have run into a small issue with FwBUilder 3.0 - latest build. The shadow detection doesn't recognise that "custom" rules take an action I can easily work arround it. But before raise a bug report I just wanted to check that it wasn't by design. I would expect that "custom" rules would be invisable to shadow detection, as it is not possible to know if they perform any action. This is the error I get when I compile the policy below (also attached image). Error: Rule 'authGate 0 (global)' shadows rule 'authGate 1 (global)' below it ---------------------------------------------------------- Chris Martin m: 0419812371 ---------------------------------------------------------- ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion rules.jpg (32K) Download Attachment
	Re: Shadow Detection & Custom Rules by Vadim Kurland ✎ :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message On Aug 2, 2009, at 7:32 AM, Chris Martin wrote: I have run into a small issue with FwBUilder 3.0 - latest build. The shadow detection doesn't recognise that "custom" rules take an action I can easily work arround it. But before raise a bug report I just wanted to check that it wasn't by design. I would expect that "custom" rules would be invisable to shadow detection, as it is not possible to know if they perform any action. This is the error I get when I compile the policy below (also attached image). Error: Rule 'authGate 0 (global)' shadows rule 'authGate 1 (global)' below it <rules.jpg> I think "-m recent --name authGate --update --seconds 300" should be the custom service rather then custom action. That will take care of the shadowing detection. btw, did you see the new Users Guide ? 300 pages! Lots of examples were incorporated into it from the cookbook. There are examples for the Custom Service there as well. html version: http://www.fwbuilder.org/docs/users_guide/book1.htm pdf version is linked off the home page http://www.fwbuilder.org/ Vadim Kurland ✍ vadim@... ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: Shadow Detection & Custom Rules by Chris Martin-15 :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Vadim That worked a treat. I had completely forgotten about custom services.... Plus. The rule set is easier to understand Thanks ---------------------------------------------------------- Chris Martin m: 0419812371 ---------------------------------------------------------- On Mon, Aug 3, 2009 at 1:56 AM, Vadim Kurland ✎ <vadim@...> wrote: On Aug 2, 2009, at 7:32 AM, Chris Martin wrote: I have run into a small issue with FwBUilder 3.0 - latest build. The shadow detection doesn't recognise that "custom" rules take an action I can easily work arround it. But before raise a bug report I just wanted to check that it wasn't by design. I would expect that "custom" rules would be invisable to shadow detection, as it is not possible to know if they perform any action. This is the error I get when I compile the policy below (also attached image). Error: Rule 'authGate 0 (global)' shadows rule 'authGate 1 (global)' below it <rules.jpg> I think "-m recent --name authGate --update --seconds 300" should be the custom service rather then custom action. That will take care of the shadowing detection. btw, did you see the new Users Guide ? 300 pages! Lots of examples were incorporated into it from the cookbook. There are examples for the Custom Service there as well. html version: http://www.fwbuilder.org/docs/users_guide/book1.htm pdf version is linked off the home page http://www.fwbuilder.org/ Vadim Kurland ✍ vadim@... ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion