Language Selection

English French German Italian Portuguese Spanish

NuFW: Single sign-on meets firewall

Filed under
Software
MDV

Mandriva has recently released the latest version of its next-generation firewall, NuFW 2.1.1.

NuFW starts, like most Linux firewall software does, on the foundation of the Linux kernel's Netfilter, a set of basic IP (Internet Protocol) hooks that allows kernel modules to register callback functions with the network stack. In most distributions, it's used with iptables to create generic Linux firewalls.

Where NuFW steers away from commonplace firewalls is by bringing the notion of user identity to the firewall's security rules. With most firewalls, the rules on what network ports are enabled or disabled is determined by the computer's network address. For example, you might let the PC with the address 192.168.0.100 have access to the IP port range 6881 to 6891 to make it work better with the BitTorrent file sharing protocol. With NuFW, the firewall permissions follow an authenticated user instead of a PC's address.

Thus, firewall filtering rules are not based on just computers, but also on users or groups.

Full Story.

More in Tux Machines

Graphics: AMDGPU, Radeon, Intel DRM

  • AMDGPU DC Code Lands For Linux 4.15 Kernel
    Linus Torvalds has accepted the AMDGPU DC display code pull request for the Linux 4.15 kernel. AMD Linux users can now rejoice! Overnight David Airlie sent in the AMDGPU DC pull request for Linux 4.15 and since then Linus Torvalds was active on the kernel mailing list ranting about AMD header files and other unrelated to DC code. He was also pulling in other PRs... It was getting a bit worrisome, given the DC code not being in pristine shape, but it was exciting as heck to see this evening that he did go ahead and pull in the 132 thousand lines of new kernel code to land this AMDGPU DC. Linus hasn't provided any commentary about DC on the kernel mailing list as of writing.
  • Radeon VCN Encode Support Lands In Mesa 17.4 Git
    It's an exciting day for open-source Radeon Linux users today as besides the AMDGPU DC pull request (albeit still unmerged as of writing), Radeon VCN encoding support has landed in Mesa Git.
  • The - Hopefully - Final Stab At Intel Fastboot Support
    Intel's Maarten Lankhorst has sent out what could be the final patches for enabling "fastboot" support by default within their DRM graphics driver.

Raspberry Digital Signage 10

It shows web pages from Internet, LAN or internal sources (a WordPress installation comes already installed by default on the SD card); there is no way to escape this view but rebooting the machine. Marco Buratto has released Raspberry Digital Signage 10.0 today, which comes with the latest and greatest Chromium build (featuring advanced HTML5 capabilities, Adobe Flash support and H264/AVC video acceleration), so you can display more attractive resources, more easily. Read more

Red Hat Leftovers

Latest Openwashing