Messages

1

Security and Networking / Firewall?

« on: November 26, 2005, 03:44:54 pm »

I've recently packaged up the simple iptables firewall I use on my Zaurus.  It doesn't require any configuration---basically prevents remote users from connecting to your Zaurus while allowing you to surf and use the cradle as usual.

Please see the Snowfence page for .ipk downloads and more information.

2

Angstrom & OpenZaurus / Openzaurus 3.5.3 Firewall Solutions

« on: November 26, 2005, 03:37:17 pm »

Has anyone out there written an iptables script for their Zaurus? If so, please post it!

Also, how have you implemented it? Do you just drop the script into /etc/init.d with links in /etc/rc[2-5].d?
[div align=\"right\"][{POST_SNAPBACK}][/a][/div]

I've implemented "Snowfence", a simple iptables firewall that prevents remove users from connecting to your Zaurus over the net while still permitting you to surf and use the cradle as usual.  I've made an .ipk for it; it just drops the script into /etc/rc.d/init.d and adds the appropriate rc links, just as you guessed.

Please see [a href=\"http://alum.wpi.edu/~tfraser/Software/Snowfence]the Snowfence page[/url]
for downloads and more info.

3

Security and Networking / firewalling on zaurus?

« on: July 11, 2005, 09:30:57 am »

I just generated an .ipk for the "Snowfence" iptables-based firewall I use on my Zaurus SL-6000.  It's quite small and simple, and should work on other Zaurus versions and ROMS as well.  Please see

      http://alum.wpi.edu/~tfraser/Software/Snowfence

Version 1.1 contains rules similar to those posted by speculatrix in this thread nearly a year ago, with the exception that it allows bidirectional traffic on the USB interface so you can use the cradle as you normally would.  In addition, the .ipk sets up the traditional /etc/rc.d files so the firewall will start and stop properly on reboots.  There's no configuration to fool with; just install the ipks and that's it.

I have also mirrored the .ipk's for iptables and iptables-modules posted earlier by Jcroto1, to help keep them available on the Net.