|

Computer Security

»

»

Firewall Builder

»

fwbuilder-discussion

old-broadcast

View: New views

6 Messages — Rating Filter: Alert me

	old-broadcast by Joost Wolthuis :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Some parts of this message have been removed. Learn more about Nabble's security policy. Hi, I just upgrade to firewallbuilder version 3 Found a small problem however. We still used the predefined object “old-broadcast” During generation the is a significant other rule generated. The v3.07 rule is NOT correct. Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP I removed the old-broadcast object from my firewalls but it might a fixed in the future. Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: old-broadcast by Vadim Kurland ✎ :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Joost, I can't reproduce this with 3.0.7. Are you using object "old broadcast" that is defined in the Standard objects library ? This object is defined as address range (for historical reasons). Is this what you are using ? I get the following iptables command when I try: $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP If you use the standard object and still get -d 0/0 , please send a test .fwb file to me that demonstrates the problem. --vk On Thu, Oct 29, 2009 at 1:35 PM, Joost Wolthuis <J.Wolthuis@...> wrote: Hi, I just upgrade to firewallbuilder version 3 Found a small problem however. We still used the predefined object “old-broadcast” During generation the is a significant other rule generated. The v3.07 rule is NOT correct. Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP I removed the old-broadcast object from my firewalls but it might a fixed in the future. Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: old-broadcast by Joost Wolthuis :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Some parts of this message have been removed. Learn more about Nabble's security policy. Vadim, It is from the standard library. It is however an upgraded firewall from 2.x Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to From: vadim@... [mailto:vadim@...] On Behalf Of Vadim Kurland Sent: donderdag 29 oktober 2009 18:23 To: Joost Wolthuis Cc: Fwbuilder List (E-mail) Subject: Re: [Fwbuilder-discussion] old-broadcast Joost, I can't reproduce this with 3.0.7. Are you using object "old broadcast" that is defined in the Standard objects library ? This object is defined as address range (for historical reasons). Is this what you are using ? I get the following iptables command when I try: $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP If you use the standard object and still get -d 0/0 , please send a test .fwb file to me that demonstrates the problem. --vk On Thu, Oct 29, 2009 at 1:35 PM, Joost Wolthuis <J.Wolthuis@...> wrote: Hi, I just upgrade to firewallbuilder version 3 Found a small problem however. We still used the predefined object “old-broadcast” During generation the is a significant other rule generated. The v3.07 rule is NOT correct. Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP I removed the old-broadcast object from my firewalls but it might a fixed in the future. Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: old-broadcast by Joost Wolthuis :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Henrique, It is not the notation is is the range 0.0.0.0 and 0.0.0.0/0 are both valid but 0.0.0.0 is one address and 0/0 is ANY address 0.0.0.0 should be read as 0.0.0.0/255.255.255.255 Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| Email: j.wolthuis@... \| Please consider the environment and don't print this e-mail unless you really need to -----Original Message----- From: Henrique de Moraes Holschuh [mailto:hmh@...] Sent: vrijdag 30 oktober 2009 2:54 To: Joost Wolthuis; Fwbuilder List (E-mail) Subject: Re: [Fwbuilder-discussion] old-broadcast On Thu, 29 Oct 2009 13:35 +0100, "Joost Wolthuis" <J.Wolthuis@...> wrote: > We still used the predefined object “old-broadcast” > > During generation the is a significant other rule generated. The v3.07 > rule is NOT correct. > > Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP > > Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP http://en.wikipedia.org/wiki/IPv4#Address_representations 0/0 is a perfectly valid IPv4 representation of 0.0.0.0/0, and works just fine with iptables. That said, I don't know why fwbuilder is using that notation. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: old-broadcast by Vadim Kurland ✎ :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message On Fri, Oct 30, 2009 at 8:18 AM, Joost Wolthuis <J.Wolthuis@...> wrote: Vadim, It is from the standard library. It is however an upgraded firewall from 2.x in this case I need to see the rule and firewall object. Could you send the data file (.fwb) to me ? If not, please put together a small example file to reproduce the problem. --vk Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to From: vadim@... [mailto:vadim@...] On Behalf Of Vadim Kurland Sent: donderdag 29 oktober 2009 18:23 To: Joost Wolthuis Cc: Fwbuilder List (E-mail) Subject: Re: [Fwbuilder-discussion] old-broadcast Joost, I can't reproduce this with 3.0.7. Are you using object "old broadcast" that is defined in the Standard objects library ? This object is defined as address range (for historical reasons). Is this what you are using ? I get the following iptables command when I try: $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP If you use the standard object and still get -d 0/0 , please send a test .fwb file to me that demonstrates the problem. --vk On Thu, Oct 29, 2009 at 1:35 PM, Joost Wolthuis <J.Wolthuis@...> wrote: Hi, I just upgrade to firewallbuilder version 3 Found a small problem however. We still used the predefined object “old-broadcast” During generation the is a significant other rule generated. The v3.07 rule is NOT correct. Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP I removed the old-broadcast object from my firewalls but it might a fixed in the future. Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion
	Re: old-broadcast by Vadim Kurland ✎ :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Joost, we haven't figured out what is going on here. Please help me help you, if this is really a bug, I need more information to reproduce it and then fix it. Could you send your data file to me ? If not, please create a small data file with an example that demonstrates the problem. --vk On Fri, Oct 30, 2009 at 8:25 AM, Vadim Kurland <vadim@...> wrote: On Fri, Oct 30, 2009 at 8:18 AM, Joost Wolthuis <J.Wolthuis@...> wrote: Vadim, It is from the standard library. It is however an upgraded firewall from 2.x in this case I need to see the rule and firewall object. Could you send the data file (.fwb) to me ? If not, please put together a small example file to reproduce the problem. --vk Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to From: vadim@... [mailto:vadim@...] On Behalf Of Vadim Kurland Sent: donderdag 29 oktober 2009 18:23 To: Joost Wolthuis Cc: Fwbuilder List (E-mail) Subject: Re: [Fwbuilder-discussion] old-broadcast Joost, I can't reproduce this with 3.0.7. Are you using object "old broadcast" that is defined in the Standard objects library ? This object is defined as address range (for historical reasons). Is this what you are using ? I get the following iptables command when I try: $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP If you use the standard object and still get -d 0/0 , please send a test .fwb file to me that demonstrates the problem. --vk On Thu, Oct 29, 2009 at 1:35 PM, Joost Wolthuis <J.Wolthuis@...> wrote: Hi, I just upgrade to firewallbuilder version 3 Found a small problem however. We still used the predefined object “old-broadcast” During generation the is a significant other rule generated. The v3.07 rule is NOT correct. Version 2.19 -> $IPTABLES -A OUTPUT -d 0.0.0.0 -j DROP Version 3.07 -> $IPTABLES -A OUTPUT -d 0/0 -j DROP I removed the old-broadcast object from my firewalls but it might a fixed in the future. Best regards / Met vriendelijke groet, Joost Wolthuis ----- Sr. Product Specialist \| Telecats bv \| KvK Enschede 06069106 \| Support: 053 488 99 20 \| Tel direct: 053 488 99 15 \| Fax: 053 488 99 10 \| E‑mail: j.wolthuis@... \| P Please consider the environment and don't print this e-mail unless you really need to ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Fwbuilder-discussion mailing list Fwbuilder-discussion@... https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion