Hi Cecil,
I have downloaded and installed Cookfire.  You are right, not too many
docs or descriptions on it.  I will try to describe.

1) The install 
It is a basic system installation, with a graphical install.  You will
need between 300 and 1200 MB available, and around 32M RAM.
It will install a good number of packages and utilities, apache, php,
perl, ssh, ssl, bastille-firewall, etc. No X-windows, so no X utilities or
programs.  The install will set up a root account, and admin account, and
you can optionally add a user (although there is no real reason for that).
 The Kernel is a 2.2.18.  You specify your network interfaces during the
installation.  It is very important that you properly identify your lan
interface, and network address.


2) The configuration.  It was  designed to be able to install the base,
and unplug keyboard and monitor, if desired.  After the reboot, you just
point nescape to the lan IP you provided in the install
(https://192.168.0.1:8443), and go from there.  Here is a large
screenshot:
http://www.heronet.2y.net/snapshot2.png

3)  Maintenance.  Everything you need to do is provided via the web
interface.  There is even a java applet to allow you to reach a shell
command.  You are provided graphic monitor info, a means to status all
procs, and configure/add/del rulesets on the firewall via a php frontend
to bastille-firewall.  If you enable ssh, and ssh in from another
location, you will be given a text menu rendition of the configuration for
bastille.  You can also create backup files to restore the firwall later,
if necessary.

4)  Problems.  Port forwarding doesn't work.  I had to do it by hand.  Let
me know if you need help with that.  In fact, ipmasqadm portfw is not in
the distribution I used (beta3).  Also, I have some missing or misspointed
links when it comes to restrict access-internet traffic.  But, it can
still be configured if yo play with it.

Anyway, that's the long and short of it.  Let me know if you have specific
questions, as I would be happy to answer.  All in all, I am quite pleased
with it, and especially since I got port forwarding to work, and can use a
web and mail server from behind the firewall.

Ron







--- Cecil Watson <[EMAIL PROTECTED]> wrote:
> Has anyone taken a look at Cookfire?  What all does it include?  The ISO
> looks VERY big to be just a router/firewall...  Thanks in advance,
> 
> Cecil
> 


=====
^C
quit
:q
exit
?
help
shit

__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/

Reply via email to