On Fri, Aug 17, 2007 at 01:44:23PM +0100, Bastien Nocera wrote:
On Fri, 2007-08-17 at 07:47 -0400, Jesse Keating wrote:
> On Fri, 17 Aug 2007 02:30:17 +0100
> Bastien Nocera <bnocera(a)redhat.com> wrote:
>
> > Maybe Lennart can fix it too? :)
> >
> > Here's an old entry in my bookmarks:
> >
http://0pointer.de/lennart/projects/fieryfilter/
> >
http://0pointer.de/lennart/projects/fieryfilter/fieryfilter.png
> >
> > This probably needs UI love, and use of D-Bus instead of Unix sockets
> > for the admin rights, but the idea is there.
>
> Actually I find these questions to be a net lose. Just like the ssl
> cert questions in browsers. They're scray questions in languages the
> user either doesn't understand or just plain doesn't care about. (and
> no, I don't have a better suggestion to solve the problem)
I was mostly talking about the infrastructure that this provides. and I
mentioned the UI needs love. It would allow us to do something like
that:
http://www.wap.org/journal/security3/firewall.jpg
This looks fairly sensible. From the look of the png above though,
it pops up a dialog for every packet that doesn't match the rules?
That sounds like a *really* bad idea.
Dave
--
http://www.codemonkey.org.uk