SINUS Firewall 0.1 review

SINUS project is a application which assess the potential of security without obscurity. The SINUS Firewall is a TCP/IP packet f

License: GPL (GNU General Public License) File size: 0K Developer: Harald Weidner

0

SINUS project is a application which assess the potential of security without obscurity.

The SINUS Firewall is a TCP/IP packet filter for the Linux operating system. It is distributed under the GNU General Public Licence and comes with complete source code, as the Linux operating system does.

The SINUS firewall is a free and easy way to protect your network from the malware of the Internet. It does not guarantee perfect security, however it comes with a wealth of features, including:

Filtering of all header fields in the IP, TCP, UDP, ICMP, IGMP packets.
Intelligent RIP and FTP support.
Easy to understand, text-based configuration.
Graphical management interface for configuration of several firewalls.
Dynamic rules, including counters and time-outs.
Extensive logging, alerting, and counter intelligence.
Prevention of packet and address spoofing - GNU GPL license.

To install the software, you need a Linux 2.0.x based system. We suggest you install a bare-bone system without X or any of the other nifty features which tend to have security holes. You should not install user accounts on the firewall system. Log-ins other than from the console should be forbidden (if you absolutely have to log in remotely, we strongly suggest you install a copy of ssh).

Although the software has been subject to thorough testing, and has been continuously running without crashes for over 12 months, we are confident someone will eventually unconver A BUG in the software. Therefore, it is version "0.1".

Please do not use this software as the sole means to protect your top secret data. This software is intended for:

People who want to study firewalls
People who don't trust their current firewall
People who currently don't have any protection at all (even if there are serious bugs, it cannot get worse, can it?)

What's New in This Release:
NEW FEATURES
user level authentification between firewall and management interface
compiles and runs on libc6 (glibc2) systems.
CHANGES
management interface now written as Java application (JDK 1.1.6)
detect land attack
changed name from sf to sifi (SINUS firewall) due to change of maintainer (now Harald Weidner ).
BUG FIXES
TCP RST of established connections now pass through the firewall
fixed a segfault bug in the passive FTP code