----- Original Message ----- From: "Andrea Galmacci - awd*" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 10, 2003 7:11 PM Subject: Re: [leaf-devel] LEAF Web Interface - was: Fw: [Shorewall-users] The community
> Lynn, > > > > > > 2. I've decided that Webmin was too much in terms of load for my > > > embedded Bering - so I decided to use thttpd as a web server: the web > > > interface is built from the Weblet example; > > > > Thttpd is a good option, but rather large comparatively. I don't know > where > > sh-httpd is lacking from doing this type of project. > > > > > sh-httpd has to my opinion at least two big problems: > > a. lack of POST method support - I know there is a patch but I've never > found it > b. speed - thttpd outperform sh-httpd 4 to 1 at least worst case - display > only > > > > > > > 3. the web server runs as root - that's in most's opinion, as a > matter > > > of facts, a BAD approach for security issues; > > > > Terrible option unless you like having to support commercial boxes that > > have been rooted. I would suggest a C-suid binary to overwrite anything > > after proper authentication (ie... SSL, ssh, zebedee, etc...) and running > > the webserver/CGI as a non-priviledged user. > > > > > you are talking marsian to my ignorance: could you please point me to some > source of information about suid binary? > > > > > > > > > 4. the interface is not complete but it offers the possibility to > > > > > modify Shorewall scripts maintaining full compatibility with Tom's > > > > > original scripting, launching Shorewall commands (start, stop, ...) > and > > > > > offering full logs visibility. > > > > I believe Eric W. has a package/executable in his leaf/devel directory > that > > does this. The project that myself and others are working on goes far > beyond > > this and will require a compatability layer for existing LEAF variants... > this > > is the price to make it work on more than one variant. > > > > will look for. > > > Thank you for your comments, > > - Andrea > > > > ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
