[maemo-developers] Dynamic iptables firewall NAT IP masquerade shell scripts + dialog - kind request

[From: John Holmblad]

Darius,

your earlier post led me to research a product called Kmyfirewall which 
is a GUI based front end for iptables that is designed for KDE. I asked 
the develolper if he knew of anyone attempting to port the front end to 
the Internet tabled but he does not know of any such attempt.

Here also is the sourceforge www page for the project:


    http://sourceforge.net/projects/kmyfirewall

If I understand correctly it sounds like you one and perhaps 2 issues to 
address:

1. Traffic Shaping for 802.11 clients to a given 802.11 AP on your network.

2. A convenient way to remotely manage your network using the Internet 
Tablet as a management terminal (e.g. using SSH, VNC,or RDP, etc.) 
communicating with your network through the Internet, itself accessed 
from your Internet tablet via Bluetooth/3G, Bluetooth/evdo, or 802.11 to 
a public or private 802.11 Access Point (e.g. hot spot).



Best Regards,

 

John Holmblad

 

Acadia Secure Networks, LLC

* *

*Serving the SmartDigital^TM home, entrepreneurial enterprise, and 
emerging network service provider markets*

* *

*GSEC Gold,  GCWN Gold,  GAWN,  GGSC-0100,  NSA-IAM,  NSA-IEM***

*Cisco Select Certified Partner and SMB Specialist | **Microsoft Small 
Business Specialist | Speakeasy Certified VOIP Partner | Linksys 
Authorized LVS Partner | Qualys Certified Qualysguard Specialist*

* *

(M) 703 407 2278

(F)  703 620 5388

 

(W) www.acadiasecure.com

 

primary email address:  jholmblad at acadiasecure.com 
<mailto:jholmblad at acadiasecure.com>

backup email address:  jholmblad at verizon.net <mailto:jholmblad at verizon.net>



Darius Jack wrote:
> Hi John and others,
>
> spent last days learning how to manage bandwidth in my router + server.
> What I need is dynamic bandwidth management.
>
> To have 3 classes of wifi users.
> class 1 - superuser - full bandwidth access
> class 2 - users identified by MAC address
> class 3 - anonymous users (no MAC address entered)
>
> What I get with iptables, wshaper is wan/lan bandwidth management.
> What I need is wlan bandwidth management by users no. , by application, by time of day, date and the like.
>
> Remotely assigning wifi access without the need to rebot server each time.
> Ok.
> I can run iptables from command line anyway.
>
> But need a nice tool with basic graphical interface (dialog is ok)
> and append and remove/ delete MAC address, to generate iptables rules, when run as a shell script .
>
> Another issue is
> I need my router + server to access wifi Internet as a client
> and share the same access to wifi clients as a server,
> with bandwidth management on.
>
> Please refer me to some nice places with shell script solutions.
>
> thanks
>
> Darius
>
>
> --- On Fri, 25/7/08, John Holmblad <jholmblad at acadiasecurenets.com> wrote:
>
>   
>> From: John Holmblad <jholmblad at acadiasecurenets.com>
>> Subject: Re: Dynamic iptables firewall NAT IP masquerade shell scripts + dialog - kind request
>> To: dariusjack2006 at yahoo.ie
>> Cc: maemo-developers at maemo.org
>> Date: Friday, 25 July, 2008, 5:13 PM
>> Darius,
>>
>> would a VNC client on your 770 be a solution to manage your
>> systems? If 
>> not,why not?
>>
>> Alternatively you install a linux virtual machine on one of
>> your systems 
>> and VNC into it from your 770 and then use that linux VM to
>> control the 
>> servers in your server "farm".
>>
>>
>> Best Regards,
>>
>>  
>>
>> John Holmblad
>>
>>  
>>
>> Acadia Secure Networks, LLC
>>
>> * *
>>
>>
>>
>> Darius Jack wrote:
>>     
>>> Hi,
>>>
>>> I am trying to restrict maemo wifi access to Internet
>>>       
>> on-the-fly
>>     
>>> and have one with admin's access ssh
>>> and have some preloaded shell scripts running on a
>>>       
>> server
>>     
>>> and the ability to edit shell scripts locally on maemo
>>> and sent to server to be run
>>> to avoid on-line shell script editing while wifi
>>>       
>> network is suddenly off.
>>     
>>> Ok. In plain words.
>>> I need OS2007HE (or OS2008) running 770
>>> to act as a remote console for a number of servers and
>>>       
>> APs
>>     
>>> and to control some servers + AP remotely
>>> get traffic load data and more.
>>> Not necessary VNC .
>>> Going abroad I would like to still have a control of a
>>>       
>> server and AP,
>>     
>>> remote rebooting, remote ports closing, add/ remove
>>>       
>> MAC addresses
>>     
>>> and the like.
>>>
>>> So maemo as mobile Linux console.
>>> Any ideas, links to some scripting, dynamic iptables,
>>>       
>> firewall, NAT, masquerade
>>     
>>> thanks
>>>
>>> Darius
>>>
>>>
>>> Send instant messages to your online friends
>>>       
>> http://uk.messenger.yahoo.com 
>>     
>>> _______________________________________________
>>> maemo-developers mailing list
>>> maemo-developers at maemo.org
>>>
>>>       
>> https://lists.maemo.org/mailman/listinfo/maemo-developers
>>     
>>>
>>>       
>
> Send instant messages to your online friends http://uk.messenger.yahoo.com 
>
>
>