WYAE - FWTOOLS Mailing List Archive


Update/Status of FW1Rules / FWdoc
From:Volker Tanger
Date: Wed, 14 Feb 2007 22:56:32 +0100

Greetings!

This is a collect email to all who have inquired about the status of
FW1Rules within the last year. Due to time constraints and
change of job focus I had not worked much on FW1Rules.

The most asked question was: how is support for the newer versions of
CheckPoint (NGX / R66 / R60 / R61)? This usually due to
impending changes to your systems and my announcement to freeze
development of FW1Rules.

Yes, development of FW1Rules is frozen - it supports NG up to R50, most
of R55, but flunks on NGX and R60 or higher due to yet again changes of
the config file format.

Nope, that's not the end of the world, as I've made progress on the
FWdoc front (which is supposed to become successor of FW1Rules):
FW1r55_to_FWdoc now is debugged and producing proper JSON format which
is accepted by all the tools/libraries I tested it against. Thus there
is no advantage over FW1Rules - yet. But this way I have made the first
step and can test the following steps with realistic data.

I am currently wrestling with various template engines to flexibly
produce output from FWdoc.

As soon as I have that one down, it'll be simple & fast to produce
templates for all formats you maybe already know from the FW1Rules
templates directory.

The step after that will be filters for used/unused objects and
other filtering (e.g. to print only rules affecting one customer).


That is, when FWdoc will have approximately the same functionality as
FW1Rules - only modularized and generalized.


And then I'll probably start into a new parser for NGX/R60/R61
configuration files unless an other target/platform is more
interesting/promising (for me).  ;-) 

But then I only need to convert to FWdoc format and can fully (re)use
all other filtering and output mechanisms.


Bye

Volker


-- 

Volker Tanger    http://www.wyae.de/volker.tanger/
--------------------------------------------------
volker.tanger@wyae.de              PGP Fingerprint
378A 7DA7 4F20 C2F3 5BCC  8340 7424 6122 BB83 B8CB