-------- From academic-firewalls-owner@net.tamu.edu Wed Oct 12 13:00:17 1994 X-Sender: chambers@houtel.telecomm.uh.edu (Unverified) MIME-version: 1.0 Content-type: text/plain; charset="us-ascii" Content-transfer-encoding: 7BIT Date: Wed, 12 Oct 1994 11:58:43 -0500 From: chambers@UH.EDU Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Subcribe subscribe Charles Chambers University of Houston Chambers@uh.edu Telecommunications Department (713) 743-1124 Manager of Network Services -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 06:06:45 1994 In-Reply-To: <01HI6S9GSAZ6003NET@Post-Office.UH.EDU> from "chambers@UH.EDU" at Oct 12, 94 11:58:43 am X-Mailer: ELM [version 2.4 PL21] Content-Type: text Content-Length: 267 Date: Thu, 13 Oct 1994 12:00:48 +0100 (MET) From: cms jci Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Subcribe > > subscribe > > Charles Chambers University of Houston > Chambers@uh.edu Telecommunications Department > (713) 743-1124 Manager of Network Services > > > What does it mean? I don't understand. Jean-Christophe Isaac Paris, France -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 06:52:39 1994 Posted-Date: Thu, 13 Oct 94 12:35:57 GMT Cc: academic-firewalls@net.tamu.edu In-Reply-To: <199410131100.AA16497@ns.fnet.fr> (message from cms jci on Thu, 13 Oct 1994 12:00:48 +0100 (MET)) Date: Thu, 13 Oct 94 12:35:57 GMT From: vigna@bach.cefriel.it (Giovanni Vigna) Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Subcribe > > subscribe > > Charles Chambers University of Houston > Chambers@uh.edu Telecommunications Department > (713) 743-1124 Manager of Network Services > > > What does it mean? I don't understand. Jean-Christophe Isaac Paris, France I don't unserstand too. I subscribed the mailing list a couple of weeks ago, and since then I received no life signs. Is everything functioning ok? Thank You. - -- ********************************************* * Giovanni Vigna vigna@mailer.cefriel.it * * * * CEFRIEL * * Via Emanueli, 15 Tel: +39-2-66100083 * * 20126 MILANO 66100750 * * Italy Fax: +39-2-66100448 * ********************************************* -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 07:06:38 1994 In-Reply-To: <9410131235.AA20165@bach.cefriel.it> from "Giovanni Vigna" at Oct 13, 94 12:35:57 pm X-Mailer: ELM [version 2.4 PL22] Content-Type: text Content-Length: 788 Date: Thu, 13 Oct 1994 07:00:50 -0600 (CDT) From: Pug Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Subcribe > I don't unserstand too. I subscribed the mailing list a couple of weeks ago, > and since then I received no life signs. Well when the group first started, there were lots of life signs, since then it's sorta died to a halt. > Is everything functioning ok? Dunno to be honest. OBFirewall: Is there anyone out there using Drawbridge from TAMU? I find what little I know of it to be obnoxious, but I want to hear from people actually using it to find out if it's useful and fast enough. Ciao, - -- Richard Bainter Mundanely | System Analyst - OMG/CSD Pug Generally | Applied Research Labs - U.Texas pug@arlut.utexas.edu | pug@bga.com Note: The views may not reflect my employers, or even my own for that matter. -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 07:19:58 1994 Posted-Date: Thu, 13 Oct 94 13:03:18 GMT Cc: academic-firewalls@net.tamu.edu In-Reply-To: <199410131100.AA16497@ns.fnet.fr> (message from cms jci on Thu, 13 Oct 1994 12:00:48 +0100 (MET)) Date: Thu, 13 Oct 94 13:03:18 GMT From: vigna@bach.cefriel.it (Giovanni Vigna) Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Subcribe g > > subscribe > > Charles Chambers University of Houston > Chambers@uh.edu Telecommunications Department > (713) 743-1124 Manager of Network Services > > > What does it mean? I don't understand. Jean-Christophe Isaac Paris, France I don't unserstand too. I subscribed the mailing list a couple of weeks ago, and since then I received no life signs. Is everything functioning ok? Thank You. - -- ********************************************* * Giovanni Vigna vigna@mailer.cefriel.it * * * * CEFRIEL * * Via Emanueli, 15 Tel: +39-2-66100083 * * 20126 MILANO 66100750 * * Italy Fax: +39-2-66100448 * ********************************************* -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:12:37 1994 Date: Thu, 13 Oct 94 10:06:09 EST From: anaclara@inf.ufrgs.br (Ana Clara Pinto) Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu unsubscribe anaclara@inf.ufrgs.br -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:16:26 1994 In-reply-to: Your message of "Thu, 13 Oct 1994 12:35:57 GMT." Date: Thu, 13 Oct 1994 09:12:28 -0400 From: Jim Truitt Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Subcribe I would guess that the person is trying to subscribe to the mailing list. When subscribing to a mailing list the "subscribe" request must be directed to the list manager not the mailing list. I would assume all is well. JT ============================================================= > > subscribe > > Charles Chambers University of Houston > Chambers@uh.edu Telecommunications Department > (713) 743-1124 Manager of Network Services > > > What does it mean? I don't understand. Jean-Christophe Isaac Paris, France I don't unserstand too. I subscribed the mailing list a couple of weeks ago, and since then I received no life signs. Is everything functioning ok? Thank You. - -- ********************************************* * Giovanni Vigna vigna@mailer.cefriel.it * * * * CEFRIEL * * Via Emanueli, 15 Tel: +39-2-66100083 * * 20126 MILANO 66100750 * * Italy Fax: +39-2-66100448 * ********************************************* -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:29:00 1994 Date: Thu, 13 Oct 94 14:22:38 BST From: Dave Mitchell Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Drawbridge [was: Re: Subcribe] >OBFirewall: Is there anyone out there using Drawbridge from TAMU? I find >what little I know of it to be obnoxious, but I want to hear from people >actually using it to find out if it's useful and fast enough. I'm using it to filter packets between my dept and the rest of the campus. It seems fast enough for us, but we dont have particulary heavy traffic. Its certainly useful. For example, our setup (roughly speaking) is to allow any TCP connection initiated from with the dept, while disallowing most TCP connections initiated from outside the dept except for certain ports on certain machines. We also have it set up to disallow any packets entering our dept which claim to have an internal IP address. Installation was straightforward. I have a number of critisisms of it, mainly: * it is IP only (no IPX etc) * it blindly forwards anthing thats not IP (it would be nice to be able to set it to reject anything it doesnt recognise), * it doesnt filter ICMP (so redirects and other such crap still get through) * reloading the compiled filter rules is uncessarily fiddly (you have to upload around 5 separate filter files - there isnt an "upload all" command). Still, its free and does most of what I want, so I cant really grumble. [ Now everyone's going leap on me and tell me I should be using Karlbridge :-) ] Dave. * David Mitchell, Systems Administrator, email: D.Mitchell@dcs.shef.ac.uk * Dept. Computer Science, Sheffield Uni. phone: +44 114-282-5573 * 211 Portobello St, Sheffield S1 4DP, UK. fax: +44 114-278-0972 * * Standards (n). Battle insignia or tribal totems -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:40:18 1994 X-Envelope-to: academic-firewalls@net.tamu.edu Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII Content-Length: 590 Date: Thu, 13 Oct 1994 14:32:55 +0100 From: jake@berica.gest.unipd.it (Luca Polo) Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu > From academic-firewalls-owner@net.tamu.edu Thu Oct 13 14:28 MET 1994 > Date: Thu, 13 Oct 94 10:06:09 EST > From: anaclara@inf.ufrgs.br (Ana Clara Pinto) > Reply-To: academic-firewalls@net.tamu.edu > To: academic-firewalls@net.tamu.edu > > unsubscribe anaclara@inf.ufrgs.br > Er... [un]subscribe request must be directed to Majordomo@net.tamu.edu, NOT to the mailing list (or its owner)... And the syntax is: unsubscribe academic-firewalls Thank you. Luca Polo. P.S.: how is that after a month of silence, now there is a number of [un]sub- scribe requests to the wrong address ? -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:43:08 1994 From: David-Hess Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu.id.m0qvLfF-000MPfC;Thu (Linux Smail3.1.28.1 #18) (MS), Date: Thu, 13 Oct 1994 08:40:40 -0500 To: academic-firewalls@net.tamu.edu From: skurka@panam.edu (Michael Skurka) X-Sender: skurka@spectre.techrscs.panam.edu Subject: Re: Subcribe > > subscribe > > > > Charles Chambers University of Houston > > Chambers@uh.edu Telecommunications Department > > (713) 743-1124 Manager of Network Services > What does it mean? I don't understand. > Jean-Christophe Isaac Paris, France > >I don't unserstand too. I subscribed the mailing list a couple of weeks ago, >and since then I received no life signs. > >Is everything functioning ok? > >Thank You. >********************************************* >* Giovanni Vigna vigna@mailer.cefriel.it * The person who sent the original message wants to subscribe to this list. The message should have been addressed to the listserv. It appears the topic of academic firewalls isn't as "hot" now as when the list was started. Things slow down for a while, then pick up when someone posts a question or comment that sparks life again. :-) This also follows the saying "you gotta send mail to get mail".... - -------- O,O Michael Skurka, Computer Lab Supervisor voice: 210-381-3417 -m-m- University of Texas-Pan American, Edinburg TX fax: 210-381-2355 "You won't make progress by standing still." - M.Skurka, 1994 -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 08:47:29 1994 Date: Thu, 13 Oct 94 08:42:06 -0500 From: Dave Hess Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: unsubscribe requests... Please send your requests to Majordomo@net.tamu.edu. Here is some info. > To subscribe to this mailing list, send the following command in the > body of an email message to "Majordomo@net.tamu.edu": > > subscribe academic-firewalls [alternate email address] > > If you ever want to remove yourself from this mailing list, send the > following command in the body of an email message to > "Majordomo@net.tamu.edu": > > unsubscribe academic-firewalls [alternate email address] Dave - --- David K. Hess Network Analyst David-Hess@tamu.edu Computing and Information Services - Network Group (409) 845-0372 (work) Texas A&M University -------- From academic-firewalls-owner@net.tamu.edu Thu Oct 13 09:12:25 1994 Date: Thu, 13 Oct 94 09:07:01 -0500 From: Dave Hess Reply-To: academic-firewalls@net.tamu.edu To: academic-firewalls@net.tamu.edu Subject: Re: Drawbridge [was: Re: Subcribe] > >OBFirewall: Is there anyone out there using Drawbridge from TAMU? I find > >what little I know of it to be obnoxious, but I want to hear from people > >actually using it to find out if it's useful and fast enough. Well, we certainly think it's useful. Just depends on exactly what you need to do to determine if it is the right tool for you. As for fast enough, I'm just now putting the last touches on the next version. I had said it would be ODI based but due to problems with Novell's portion of ODI that they supply to driver developers, I've had to switch to NDIS. Previously we had reported around 2 Mb/sec with a 33 MHz 486 ISA PC with two SMC Elite 16 ethernet cards. The original code was polling based and coded against the WD8003 card. Preliminary tests (i.e. no tuning yet) of the new version (using SMC NDIS drivers) indicate an approximate 2.5 speed increase (i.e. 5 Mb/sec) with the same hardware and cards. I'm fighting with FDDI NDIS drivers at the moment but expect good numbers for FDDI to FDDI. > * it is IP only (no IPX etc) Well I would certainly like to put in support for other protocols but finding the time and justification to do it is rather difficult when we don't need the filtering for the other protocols (yet). I am willing to work with anyone who would like to volunteer time to adding that support though. In the specific case of IPX, route and SAP filtering in a router is quite effective anyways. > * it blindly forwards anthing thats not IP (it would be nice to be able > to set it to reject anything it doesnt recognise), I'll try to roll that in to this next release. > * it doesnt filter ICMP (so redirects and other such crap still get through) > * reloading the compiled filter rules is uncessarily fiddly (you have to > upload around 5 separate filter files - there isnt an "upload all" command). Probably not in this release but the one after will output a unified "object file" that fm will load/upload all at once. By the way, you can easily script up stuff to drive fm and fc to make things easier. You can also throw any commands you want to in the .fmrc file. Dave - --- David K. Hess Network Analyst David-Hess@tamu.edu Computing and Information Services - Network Group (409) 845-0372 (work) Texas A&M University