<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Tony's suggestion is pretty the only
solution so far that meets Sam's requirements. You could also use
Shorewall with webmin for a more zone-based firewall approach.<br>
<br>
The Astaro/Sophos UTM stuff was originally an add-on package for
SUSE Linux (re-badged as Novell Security Manager when they had a
partnership going), but it has been quite a few years since I
touched it and they may have changed it to a standalone appliance
now.<br>
<br>
Paul<br>
<br>
On 25/02/15 09:06, Tony Wicks wrote:<br>
</div>
<blockquote cite="mid:00d501d05086$9068a040$b139e0c0$@wicks.co.nz"
type="cite">
<meta http-equiv="Context-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<div class="WordSection1">
<p class="MsoNormal"><span>Just put webmin on it and use that as
the GUI to control iptables. Done and dusted.</span></p>
<p class="MsoNormal"><span> </span></p>
<div>
<div>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span
lang="EN-US"> AusNOG
[<a class="moz-txt-link-freetext" href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>] <b>On Behalf
Of </b>Sam Sarkis-UIP<br>
<b>Sent:</b> Wednesday, 25 February 2015 2:07 a.m.<br>
<b>To:</b> Skeeve Stevens<br>
<b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>; <a class="moz-txt-link-abbreviated" href="mailto:ausnog@ausnog.net">ausnog@ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] Firewall</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span lang="EN-AU">It is an odd request,
yes it MUST be a server based Firewall.</span></p>
<p class="MsoNormal"><span lang="EN-AU"> </span></p>
<p class="MsoNormal"><span lang="EN-AU">No go on the vASA or
vSRX as we don’t have access to the Hypervisor at all.</span></p>
<p class="MsoNormal"><span lang="EN-AU"> </span></p>
<p class="MsoNormal"><span lang="EN-AU">We only get given an
pre-build OS and then we can install whatever application
they want on it.</span><br>
</p>
</div>
</blockquote>
<br>
</body>
</html>