[Request] Uncomplicated Firewall

SpookyET · 2008-05-19 00:53:28

Working on it.

SpookyET · 2008-05-19 01:35:15

Ok. That sucked. It's done. http://aur.archlinux.org/packages.php?ID=17042

It was designed for ubuntu. Shitty hardcoded paths, shitty setup. I don't know if it works. I'm not getting errors though.

LTSmash · 2008-05-19 02:41:30

SpookyET wrote:

Ok. That sucked. It's done. http://aur.archlinux.org/packages.php?ID=17042
It was designed for ubuntu. Shitty hardcoded paths, shitty setup. I don't know if it works. I'm not getting errors though.

Great, let me test it.

Thanks a lot

SpookyET · 2008-05-19 11:52:30

It has to be further patched to remove Ubuntu assumptions. It's not ready. I believe the init-functions are used to enable/disable itself at startup. That's what it says when you 'ufw enable'. They don't work on arch, and I will not allow it to mess with rc.conf. That functionality must be removed. It has more lsb dependencies than those init-functions. There are other issues with it.

I've had a look at the code. In its current form, it will not work on Arch Linux without severe patching. It has a Canonical copyright slapped on it. Meaning, it was not done by the community. They, have no interest in supporting competitors of Ubuntu. I doubt they'll make it cross platform.

Don't get your hopes up. I moved away from Windows to not care about anti-viruses and firewalls. Unless you can convince me otherwise, I have no interest in working on it.

Last edited by SpookyET (2008-05-19 12:15:19)

LTSmash · 2008-05-19 20:57:29

Well I already noticed it just won't work.

Guess that the only way to do this is to ask Canonical to make it portable or to fork it.
however, since I don't know Python programming, I can't do that.

Anyway, since it's a nice and KISS FW tool, no doubt I will insist for some way to have it running under Arch.

SpookyET · 2008-05-19 21:22:39

It's not a lot of work. The LSB dependencies must be removed or rewritten. You don't need to know python, especially if you want to remove stuff. All you need is basic programming knowledge. If you really want it, I would not wait for Canonical. There is no benefit in helping other distributions for them.

LTSmash · 2008-05-19 21:43:32

SpookyET wrote:

It's not a lot of work. The LSB dependencies must be removed or rewritten. You don't need to know python, especially if you want to remove stuff. All you need is basic programming knowledge. If you really want it, I would not wait for Canonical. There is no benefit in helping other distributions for them.

Well it's just that I really like ufw and it would be nice to have it as my default CLI for iptables.

I do know Bash programming and maybe a little bit of python basics.

Where should I start correcting ufw?
Should I use your patches?

SpookyET · 2008-05-19 21:55:27

You do need my patches, but I would make a bfp.patch (big fucking patch). Anyone who has played DOOM should appreciate that. Start with the the initscript. That's bash. Try to make it as close as possible to an arch initscript. You'll have to get rid of the LSB stuff. You'll have to rewrite the log functions, or copy and paste the from the lsb somewhere.
Look at /usr/share/pacman/rc-script.proto

As for the actual ufw. I believe it only uses LSB for enable/disable. Should be easy to remove.

Use yaourt -G ufw to get my files.

LTSmash · 2008-05-19 22:26:17

You'll have to get rid of the LSB stuff. You'll have to rewrite the log functions, or copy and paste the from the lsb somewhere.

What's that for?
Should I change those functions to be Arch Like?

Well, I'll just take a look at all of the files, then if I have some doubt just ask here.

SpookyET · 2008-05-19 23:17:43

Clearly, if you have to be told how to do wit, you probably should not do it.

LTSmash · 2008-05-20 00:20:34

SpookyET wrote:

Clearly, if you have to be told how to do wit, you probably should not do it.

No, I was just being lazy.

zyghom · 2008-05-20 08:13:50

I made a comment on aur page as there is and mistake in start script (/etc/rc.d/ufw):
it should be:

[ -x /usr/sbin/ufw ] || exit 0

instead of:

[ -x ///sbin/ufw ] || exit 0

otherwise it does not start

Last edited by zyghom (2008-05-20 08:14:24)

SpookyET · 2008-05-20 14:39:05

zyghom wrote:

I made a comment on aur page as there is and mistake in start script (/etc/rc.d/ufw):
it should be:
[ -x /usr/sbin/ufw ] || exit 0
instead of:
[ -x ///sbin/ufw ] || exit 0
otherwise it does not start

My install patch is failing somewhere.

SpookyET · 2008-05-27 14:14:16

Have you abandoned it?

LTSmash · 2008-05-28 01:11:29

SpookyET wrote:

Have you abandoned it?

Not really I'm still working on it, however I have been busy with other system stuff, I will continue with it next week.

even · 2008-07-05 15:58:02

I adopted that. I think this work now. I also adopted the gui (gufw). If you have problems, please contact me.

LTSmash · 2008-07-05 16:51:04

even wrote:

I adopted that. I think this work now. I also adopted the gui (gufw). If you have problems, please contact me.

It's supposed to be fixed upstream (thanks to my bug report xD)

http://bazaar.launchpad.net/~jdstrand/u … vision/158

14 Install
15 ------- 15 -------
16 python ./setup.py install --root=PREFIX 16 Users can install with:
17 # python ./setup.py install
18 $ python ./setup.py install --home=PREFIX
19
20
21 Distributions which install to a build directory for packaging can install
22 with:
23 $ python ./setup.py install --root=PREFIX
17 24
18 Eg: 25 Eg:
19 python ./setup.py install --root=/ 26 python ./setup.py install --root=/tmp/ufw

As you can see

$ python ./setup.py install --root=PREFIX

that code can be used to install ufw to a dir, and then package it.

even · 2008-07-06 04:11:07

Yes! Thanks very much!

In PKGBUILD, its does:

python ./setup.py install --root=$startdir/pkg || return 1

So, i think this is right, no?

LTSmash · 2008-07-06 19:09:16

even wrote:

Yes! Thanks very much!
In PKGBUILD, its does:
python ./setup.py install --root=$startdir/pkg || return 1
So, i think this is right, no?

I haven't tried this new ufw, but I guess that it installs to a specified dir, why don't you try

python ./setup.py install --root=$startdir/pkg/opt/ufw || return 1

To see if it installs to that folder or how does it works...

even · 2008-07-09 23:08:32

This will install in /, because the structure of the setup moves files to especific directories. All works now.

LTSmash · 2008-07-09 23:11:33

even wrote:

This will install in /, because the structure of the setup moves files to especific directories. All works now.

Then maybe it's time to port it to Arch?
An /etc/rc.d/ file should be created so that it can be used as a daemon in rc.conf

even · 2008-07-14 18:38:45

That is created, patching some files. All work with daemon now.

Arch Linux

#26 2008-05-19 00:53:28

Re: [Request] Uncomplicated Firewall

#27 2008-05-19 01:35:15

Re: [Request] Uncomplicated Firewall

#28 2008-05-19 02:41:30

Re: [Request] Uncomplicated Firewall

#29 2008-05-19 11:52:30

Re: [Request] Uncomplicated Firewall

#30 2008-05-19 20:57:29

Re: [Request] Uncomplicated Firewall

#31 2008-05-19 21:22:39

Re: [Request] Uncomplicated Firewall

#32 2008-05-19 21:43:32

Re: [Request] Uncomplicated Firewall

#33 2008-05-19 21:55:27

Re: [Request] Uncomplicated Firewall

#34 2008-05-19 22:26:17

Re: [Request] Uncomplicated Firewall

#35 2008-05-19 23:17:43

Re: [Request] Uncomplicated Firewall

#36 2008-05-20 00:20:34

Re: [Request] Uncomplicated Firewall

#37 2008-05-20 08:13:50

Re: [Request] Uncomplicated Firewall

#38 2008-05-20 14:39:05

Re: [Request] Uncomplicated Firewall

#39 2008-05-27 14:14:16

Re: [Request] Uncomplicated Firewall

#40 2008-05-28 01:11:29

Re: [Request] Uncomplicated Firewall

#41 2008-07-05 15:58:02

Re: [Request] Uncomplicated Firewall

#42 2008-07-05 16:51:04

Re: [Request] Uncomplicated Firewall

#43 2008-07-06 04:11:07

Re: [Request] Uncomplicated Firewall

#44 2008-07-06 19:09:16

Re: [Request] Uncomplicated Firewall

#45 2008-07-09 23:08:32

Re: [Request] Uncomplicated Firewall

#46 2008-07-09 23:11:33

Re: [Request] Uncomplicated Firewall

#47 2008-07-14 18:38:45

Re: [Request] Uncomplicated Firewall

Board footer