Language Selection

English French German Italian Portuguese Spanish

NuFW: Single sign-on meets firewall

Filed under
Software
MDV

Mandriva has recently released the latest version of its next-generation firewall, NuFW 2.1.1.

NuFW starts, like most Linux firewall software does, on the foundation of the Linux kernel's Netfilter, a set of basic IP (Internet Protocol) hooks that allows kernel modules to register callback functions with the network stack. In most distributions, it's used with iptables to create generic Linux firewalls.

Where NuFW steers away from commonplace firewalls is by bringing the notion of user identity to the firewall's security rules. With most firewalls, the rules on what network ports are enabled or disabled is determined by the computer's network address. For example, you might let the PC with the address 192.168.0.100 have access to the IP port range 6881 to 6891 to make it work better with the BitTorrent file sharing protocol. With NuFW, the firewall permissions follow an authenticated user instead of a PC's address.

Thus, firewall filtering rules are not based on just computers, but also on users or groups.

Full Story.

More in Tux Machines

Manjaro 15.12 (Capella) Gets Pacman 5 Support

The Manjaro developers have released the seventh update packs for Manjaro 15.12 (Capella), which means that it's passed the halfway for support. Read more

Canonical releases Snappy Ubuntu Core Linux image for x86-based Intel NUC DE3815TY

The Raspberry Pi is a game-changing computer. While it was primarily designed as a low-cost base on which students could learn to code, it has proven to be much more. Some consumers buy it for HTPC purposes, but more importantly, developers embrace the little computer for other projects, such as IoT. Unfortunately for some developers, the ARM architecture and rather anemic performance make the Raspberry Pi a poor choice. While some consider ARM to be the future, I'm not so sure -- x86 has been surprisingly adaptable. Today, Canonical releases an Ubuntu Core image for the x86-based Intel NUC DE3815TY. Priced around $150, this NUC is more expensive than the Pi, but it is much more powerful too; a better choice for developers needing an x86 platform. Read more Also: Snappy Ubuntu Core Gets Support on Intel NUC

Nouveau Linux 4.5 vs. NVIDIA OpenGL Performance: Open-Source Not Up To Par

With the Linux 4.5 kernel bringing PCI Express link speed changes and other alterations to the open-source NVIDIA (Nouveau) driver, here are benchmarks comparing this unofficial open-source NVIDIA Linux driver on Linux 4.4 and Linux 4.5-rc3 compared to the proprietary NVIDIA Linux graphics driver. Read more

Canonical in Talks with Android OEM Partners for Ubuntu Phones

Canonical is said to be in talks with Android OEM partners, the CEO of the company Jane Silber recently said. Read more