Re: Fedora 7 (improving s-c-securitylevel)

[Dax Kelson <dax gurulabs com>]

On Thu, 2007-01-04 at 23:05 -0300, Mauricio Teixeira (netmask) wrote:
> Em Qui, 2007-01-04 às 14:50 -0500, Bill Nottingham escreveu:
> 
> > - Make wireless rock-solid
> > - Add wireless firmware for all the chipsets we can
> 
> I'm quite new to Fedora (came from other distros), and some things I'll
> be discussing bellow may already be implemented somehow, but I couldn't
> easily find them. If that's the case, please ignore me.
> 
> Speaking about wireless, I would have two suggestions:
> #2 - Improving the system-config-securitylevel. This I need to split in
> two:
> 
> #2.1 - The current way of setting up firewall rules is excessively
> simple, and makes it very difficult to have simple things like internet
> connection sharing for a home network. It would be very cool to have the
> ability to configure a simple 1:N NAT and some port redirection.

Simple is good.

I'd be OK with a "NAT all traffic leaving interface X" setting, but
please, do not morph it into the SuSEfirewall2 monster.

Dax Kelson
Guru Labs