Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add tutorial with how-to integrate with other firewalls implementations #15

Open
ligurio opened this issue Oct 2, 2021 · 3 comments
Open

Comments

@ligurio
Copy link

ligurio commented Oct 2, 2021

Now FirewallChecker is compatible with Windows Firewall only. It would be nice to have the ability to integrate it with nftables, iptables, NetBSD npf, OpenBSD pf and so on. Please share a guide how to add integrations with other firewalls.

@ahelwer
Copy link
Contributor

ahelwer commented Oct 3, 2021

Good idea!

@NikolajBjorner
Copy link
Contributor

Sergey, I am taken aback by how the request is phrased.
There are by now several papers published in conferences on how to create models of firewalls. They address various forms of firewalls. There are also products that aim to broadly cover formats used in hybrid deployment scenarios.
I am not sure how it is reasonable to ask that software provided as an example be extended to cover an extended set of scenarios that the author isn't a user of. The example software shows what are the basic principles. Contrary to what I expected, the author responded very positively to your request.

It is also useful to point to https://github.com/Microsoft/Zen, which provides a higher level interface for writing network analysis tools (and other tools). One of the beauties of Zen is that you can write interpreters for firewall rules and have the translation to symbolic solving taken care of thanks to reflection.

@ligurio
Copy link
Author

ligurio commented Oct 4, 2021

@NikolajBjorner Sure, it's up to the project owners decide is it worth implementing or not. Your arguments look very reasonable.
I'm not a Windows user and an equivalence checker for popular opensource firewalls would be interesting for me. Thanks for pointing to Zen, didn't know about it.

Feel free to close a ticket.

P.S. @NikolajBjorner, I'll take my possibility to thank you for your work under Z3 :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants