[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RFS: apf-firewall (2nd attempt)

Dear mentors,

I am looking for a sponsor for my package "apf-firewall".

* Package name    : apf-firewall
  Version         : 9.6+rev4-1
  Upstream Author : R-fx Networks <proj@r-fx.org>
* URL             : http://www.r-fx.org/apf.php
* License         : GPL
  Section         : net

It builds these binary packages:
apf-firewall - easy iptables based firewall system

The package appears to be lintian clean.

The upload would fix these bugs: 495284

 Advanced Policy Firewall (APF) is an iptables(netfilter) based firewall
 system designed around the essential needs of today's Internet deployed
 servers and the unique needs of custom deployed Linux installations. The
 configuration of APF is designed to be very informative and present the
 user with an easy to follow process, from top to bottom of the
 configuration file. The management of APF on a day-to-day basis is
 conducted from the command line with the 'apf' command, which includes
 detailed usage information and all the features one would expect from a
 current and forward thinking firewall solution.

 Summary of features:
   * detailed and well commented configuration file
   * granular inbound and outbound network filtering
   * user id based outbound network filtering
   * application based network filtering
   * trust based rule files with an optional advanced syntax
   * global trust system where rules can be downloaded from a central
     management server
   * reactive address blocking (RAB), next generation in-line intrusion
   * debug mode provided for testing new features and configuration setups
   * fast load feature that allows for 1000+ rules to load in under 1 second
   * inbound and outbound network interfaces can be independently configured
   * global tcp/udp port & icmp type filtering with multiple methods of
     executing filters (drop, reject, prohibit)
   * configurable policies for each ip on the system with convenience variables
     to import settings
   * packet flow rate limiting that prevents abuse on the most widely abused
     protocol, icmp
   * prerouting and postrouting rules for optimal network performance
   * dshield.org block list support to ban networks exhibiting suspicious
   * spamhaus Don't Route Or Peer List support to ban known "hijacked zombie"
     IP blocks
   * any number of additional interfaces may be configured as firewalled
     (untrusted) or trusted (not firewalled)
   * additional firewalled interfaces can have there own unique firewall
     policies applied
   * intelligent route verification to prevent embarrassing configuration
   * advanced packet sanity checks to make sure traffic coming and going meets
     the strictest of standards
   * filter attacks such as fragmented UDP, port zero floods, stuffed routing,
     arp poisoning and more
   * configurable type of service options to dictate the priority of different
     types of network traffic
   * intelligent default settings to meet every day server setups
   * dynamic configuration of your servers local DNS revolvers into the firewall
   * optional filtering of common p2p applications
   * optional filtering of private & reserved IP address space

The package can be found on mentors.debian.net:
- URL: http://mentors.debian.net/debian/pool/main/a/apf-firewall
- Source repository: deb-src http://mentors.debian.net/debian unstable main
contrib non-free
- dget

I would be glad if someone uploaded this package for me.

Kind regards
 Giuseppe Iuculano

Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: