[Announce] genwall a simple iptables firewall - Page 3 - maemo.org

Active Topics

Porting apps to Leste (40)
to Maemo 7 / Leste by Maemish - 1 day, 20 hrs ago
The N900 is now 15 years old! (9)
to Nokia N900 by Arno_11 - 6 days ago
more...

Page 3 of 10

< Prev

Next >

Last »

Thread Tools

	Halftux	2012-07-15 , 13:20
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#21

If somebody want to have a look into a log file before the next release, I will give a small howto.

Install sysklogd and edit config file:

Code:

sudo gainroot
apt-get install sysklogd
vi /etc/syslog.conf

comment out (to prevent fill up the root):

Code:

#*.*;auth,authpriv.none		-/var/log/syslog

add:

Code:

kern.warning			/home/user/.genwall/iptables.log

Quote & Reply |

The Following 2 Users Say Thank You to Halftux For This Useful Post:
misterc, sifo

	Halftux	2012-09-02 , 19:28
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#22

New version out now! Major update.

Changelog v1.0.0
- Layout changes
- removed button bugs
- removed syslog related pid bug
- removed listwidget add bug no double item
- added syslog handler
- added log view
- added filter options for log view
- added extra rule creator for log view
- added icmp handling
- added filter view
- added nat view
- added output handling
- added root password Authentication
- added add/remove gateway
- added dns resolv
- added runtime add rule for log view and lo ports
- added runtime remove rule for filter view
- added save & load function for widget option

I think I need to write a manual. Screenshots and description will be updated soon.
Genwall will take part in the coding competition 2012 and will be uploaded to extras next days.

Quote & Reply |

The Following 5 Users Say Thank You to Halftux For This Useful Post:
D@vIcHoJD, Estel, fw190, peterleinchen, sifo

	Halftux	2012-09-08 , 21:01
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#23

The package is uploaded to extras-devel. Added more screenshots.

To use the icon from application browser you need to have sudser installed.

Quote & Reply |

The Following 2 Users Say Thank You to Halftux For This Useful Post:
fw190, sifo

	sifo	2012-09-08 , 21:09
	Posts: 1,359 \| Thanked: 1,292 times \| Joined on Oct 2011 @ Tartus.Syria	#24

Isnt it better to add a a "genwall.sudoers" in "/etc/sudoers.d/" ?
here is an example for the bnf.sudoers file

Code:

user ALL = NOPASSWD: /usr/sbin/bnf.sh

and then you can remove the sudo from the desktop file

i really dont know the different but this is what all devs doing

Great job dude

./sifo

__________________
[ N900-Crack ] [ The Purge ] [ New Smiles ] [ New icons ] [ ? ]
" Hey ! I've just met you and this is crazy, so install cssu maybe ? "
Please help out keeping Maemo.org alive, and consider donating.
https://www.facebook.com/ZoRk7

Quote & Reply |

The Following 3 Users Say Thank You to sifo For This Useful Post:
fw190, Halftux, sixwheeledbeast

	Halftux	2012-09-08 , 21:46
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#25

Originally Posted by sifo

Isnt it better to add a a "genwall.sudoers" in "/etc/sudoers.d/" ?
here is an example for the bnf.sudoers file
Code:
user ALL = NOPASSWD: /usr/sbin/bnf.sh
and then you can remove the sudo from the desktop file
i really dont know the different but this is what all devs doing
Great job dude

./sifo

Thank you for the hint I didn't know that. I will dig into it.

Quote & Reply |

The Following 2 Users Say Thank You to Halftux For This Useful Post:
fw190, sifo

	peterleinchen	2012-09-09 , 20:27
	Posts: 4,118 \| Thanked: 8,901 times \| Joined on Aug 2010 @ Ruhrgebiet, Germany	#26

Originally Posted by sifo

Isnt it better to add a a "genwall.sudoers" in "/etc/sudoers.d/" ?

Yes.

Originally Posted by sifo

and then you can remove the sudo from the desktop file
i really dont know the different but this is what all devs doing

No.

Originally Posted by Halftux

To use the icon from application browser you need to have sudser installed.

Nope, if you follow sifo's first hint. Put a genwall.sudoers file into /etc/sudoers.d with content

Code:

user ALL = NOPASSWD: /usr/sbin/genwall

Code:

user ALL = NOPASSWD: /opt/genwall/bin/genwall

or whereever your binary/link lives.
And then call update 'update-sudoers' in postinstall script.
This will allow the user to execute genwall with sudo rights without entering a password. You still need to call it with sudo from desktop file as well as from command line.
Sudser just adds a * to sudoers (not my security-preferred thing, but easy for lazy) ...

Last edited by peterleinchen; 2012-09-09 at 20:46.

Quote & Reply |

The Following 5 Users Say Thank You to peterleinchen For This Useful Post:
Estel, Halftux, mr_pingu, sifo, sixwheeledbeast

	sifo	2012-09-09 , 20:33
	Posts: 1,359 \| Thanked: 1,292 times \| Joined on Oct 2011 @ Tartus.Syria	#27

@peterleinchen

sorry, i missed that

Thanks

./sifo

Quote & Reply |

	Halftux	2012-09-09 , 20:49
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#28

Originally Posted by peterleinchen

Nope, if you follow sifo's first hint. Put a genwall.sudoers file into /etc/sudoers.d
And then call update 'update-sudoers' in postinstall script.
This will allow the user to execute genwall with sudo rights without entering a password. You still need to call it with sudo from desktop file as well as from command line.
Sudser just adds a * to sudoers (not my security-preferred thing, but easy for lazy) ...

Thank you to put some light in this matter. What you think about the file location? Move the binary to opt or make a symlink?

Quote & Reply |

	peterleinchen	2012-09-09 , 20:55
	Posts: 4,118 \| Thanked: 8,901 times \| Joined on Aug 2010 @ Ruhrgebiet, Germany	#29

I did not take a look into your sources/binaries, but in general put all stuff to opt and just put a symlnk to /usr/sbin/genwall (so there is no 'or' in your question

Quote & Reply |

The Following User Says Thank You to peterleinchen For This Useful Post:
Halftux

	Halftux	2012-12-21 , 02:00
	Posts: 868 \| Thanked: 2,516 times \| Joined on Feb 2012 @ Germany	#30

Released a experimental version for N9(50). See deb in first post.

- load iptable modules and run genwall as root or developer

If somebody knows how to tweak the logging for syslog in PR1.2 let me know.
At the moment I try to figure out what is possible with N950; the stock kernel modules are poor.