From: Ari Brown <ari@...>
Date: 2007-09-27T09:00:50+09:00
Subject: Re: [ANN] fire 1.2.0

BTW, you need ruby/pcap installed

On Sep 26, 2007, at 7:59 PM, Ari Brown wrote:

> For the three people who downloaded this before..... You REALLY  
> need to download this one.
>
> fire version 1.2.0 has been released!
>
> * <http://fire.rubyforge.com/>
>
> ## SYNOPSIS:
>
> Here's how to set up a Port Knocking Daemon with a key of ports 15,  
> 99, and 1632!
> When the password is accepted, it says "hello, world":
>
> class MyPorter < Porter
>
>   rule_set :normal { |pkt|
>     rule { pkt.tcp? }
>     rule { Time.now - $pkt.knock(1).time == 3 }
>
>   }
>
>   rule_set :mondays { |pkt|
> 	rule { false}                      #=> Always fails
>   }
>
>   accept :mondays {
>     puts "DIEEEEEEEE"
>   }
>
>   accept :normal {
>     puts "hello, world"
>   }
>
>   use :normal
> end
>
> MyPorter.new([15, 99, 1632], true)
>
>
> Here's how to set up a quick firewall, which saves it as an  
> IPTables script:
> Firewall :write, "/Users/ari/Desktop/firewall.sh" do
>   @debug = true
>
>   Filter do
>     chain "extra_packets"
>
> etc ....
>
> Changes:
>
> ## 1.2.0 / 2007-09-26
>
> * 1 major enhancement
>   * Changed Porter DSL and Usage
>
> * <http://fire.rubyforge.com/>
>
> ~ Ari
> English is like a pseudo-random number generator - there are a  
> bajillion rules to it, but nobody cares.
>
>
>

-------------------------------------------|
Nietzsche is my copilot