Hi ALL!
Anyone working on a FireWall program for AmigaOS?
Amiga is lacking of that tipe of programs and then is under risk of attacks...
Maybe not in near future but...

Tuxedo.

_________________
Simone"Tuxedo"Monsignori, Perugia, ITALY.

@Tuxedo

check out roadshow/IPFilter documentation, there's even an example firewall here.

_________________
Cuida tus piedras gordas.

A1200/030 32Mb
A4000D
A1-X1000.

@Ami603

Like your signature [quote]

@Ami603

Yes, i'll look for that...
But I meat something more automatic, that maybe looks for illegal calls (in or out) that a program make to system...
Something more advanced...

Tuxedo.

_________________
Simone"Tuxedo"Monsignori, Perugia, ITALY.

Its easier using a router. Let it do all the work. ;)

@Tuxedo
Quote:

But I meat something more automatic, that maybe looks for illegal calls (in or out) that a program make to system... Something more advanced...

That sounds like a "personal firewall" (like they e.g. exist for Windows). But I wouldn't call that advanced :).

_________________
» data is what you define it to be. «

The D Programming Language

@Tuxedo

I really don´t like the Windows Firewall, Spyblocker, virus checker type model. I really wish that the OS could be designed in a more intelligent way where you wouldn´t and shouldnt need these things.

To me it seems like firewalls and the sort are a bandaid fix that does not address the root of the problem. OS´s should not allow this stuff to happen in the first place.

On a Windows box these things are a intollerable and many people have Windows machines that are basically useless for anything.

@Tuxedo

While we don't experience attacks, we don't need it.
When the times comes, I'm sure a solution to appear.

_________________
Philippe 'Elwood' Ferrucci
Sam460 1.10 Ghz
AmigaOS 4 betatester
Amiga Translator Organisation

@elwood

This is the typical sicilian philosophy: I don't see, I don't feel, I don't speak...IHMO is better to prevent which to cure (Mentadent Rulez!)...

@elwood

Quote:

While we don't experience attacks, we don't need it.

So you propose to adopt Microsofts strategy? "Fixing" security holes only when they are exploited instead of providing a secure OS from the start?

@Tuxedo

Quote:

But I meat something more automatic, that maybe looks for illegal calls (in or out) that a program make to system...

Like an IDS (Intrusion Detection System)? Would be nice but not really necessary IMHO.

Like Kicko already said:

Quote:

Its easier using a router. Let it do all the work. ;)

If you have a router I would go for that!
Let the router do what it is made for.
Some ADSL modem/router support IDS too.

_________________
µA1c OS4.1 (with a dead powersupply (powersupplied))
A500

@elwood

Don't agree. Should we also wait that a house catches fire and after that start planning how to fight it? Security should be planned beforehand, not rely on a possibility to plug the holes afterwards.

@elwood

How can you say we dont need it.
I can't speak for your ISP but I regularly see people port sniffing on my subnet.
If they see you have port 2500 open with amiganetfs, then its a free for all for them and goodbye to your files.

-edit-

Not everybody has the luxury of being behind a router.

Last edited by JurassicC on 26-Jul-2006 at 07:19 AM.
Last edited by JurassicC on 26-Jul-2006 at 07:17 AM.

_________________
A1200T 603e 330Mhz - Mediator TX OS4.1 F.E.
CDTV 8MB Fast, OS3.1, SCSI, MicroSD SCSI & CD32 FMV
X5000, X1000, A1XE with OS4.1F.E.

@Tuxedo

Quote:

Yes, i'll look for that... But I meat something more automatic, that maybe looks for illegal calls (in or out) that a program make to system... Something more advanced...

Hmm but why? I don't call this advanced.
An good firewall just closes all ports i want, switches them to the stealth mode und don't let packages goes trough....

...if you want something "more advanced" eg. "user friendly" or "holy crap" then create your own Arexx or shell script which looks every 10 secs in the firewall logs and searches for an predefined string.
And then, if it finds something, do an output to something what you want eg. the shell or any other app with an Arexx port.

btw: in my opinion are Personal Firewalls not usefull... hell, when the TCP/IP (or UDP) Packages arrives at the Personal Firewall the whole OS has already worked with the TCP/IP package... and an defective TCP/IP package can already caused some damage!

Only "real" Firewalls are usefull... such that are working direct in (and not with) the TCP/IP stack like the one in the Linux Kernel... doesn't had to take an look at the AOS4 Firewall... my Computers are all connected through an good old Router

_________________
Ei gude wie!
I love my AMIGA Collection...
2x A500 (1x 1MB) OS1.3
1x A600 (40MB HDD) OS2.05 (broken joyport)
1x A1200 (68030/50, 32 MB Fast RAM) OS3.1
1x A4000D 040/40 (48 MB Fast), OS3.9, Fastlane Z3, CV64, Deneb, Indi AGA
1x CD³²
1x µAOn

@elwood

We need it..

Some years ago i got my Hd (on my A1200) wiped out by some "young" kid..
I managed to trace him down to a university here in Sweden. Luckily he had signed
my guestbook with all kind of ####..
At this time I used MiamiDX. No router, but I have a router today and some attacks
slips thru it...I know it's not the best router out there, and perhaps it's to open..

So if you belive you are safe without any firewall you are wrong.

_________________
AmigaOne G4 800Mhz, A1200TPPC 040/33 240Mhz, 2 A2000, A600,A600HD
A500,A500+ and so on.....AmigaOS4.1....1500-2000 games!?
And yeap, it's my dog...16 years old in 2015

@JurassicC

Even a personal firewall wouldnt necessarily stop this, because if yuo've got the port open, it would need to be open of the firewall as well.

Mark

_________________
IceStar Media Ltd.

@JurassicC

Quote:

How can you say we dont need it.

Because most people don't need it.

Quote:

I can't speak for your ISP but I regularly see people port sniffing on my subnet. If they see you have port 2500 open with amiganetfs, then its a free for all for them and goodbye to your files.

If you have a personal firewall it will not protect you from these kind of attacks either.

Quote:

Not everybody has the luxury of being behind a router.

What luxury? A 25-30 euro device??? Where are you living?

@Kicko

A router generally *doesn't replace* the kind of software that Tuxedo is suggesting (like ZoneAlarm for Windows), but is *complementing* it.

While the router brings an outer perimeter to the LAN and shuts off (or regulates) access from the outside, that kind of software mainly shuts off (or regulates) access from the *inside* (on individual computers in the LAN), ie network connections opened up by virus/worms, evil software with various hidden "call home" functions, and generally gives you the possibility to simply deny network access to software you *don't want* to go out on the net. Maybe even software you weren't even aware of doing so?

While network based virus and worms aren't a problem now on Amiga, it would still be nice to have this feature IMHO. Preferably if it could function like ZoneAlarm, which is a program I think is a really simple to use for basic usage (whenever a program or a process wants to access the net, a requester pops up and ask for permission) while still having the option of more advanced configuration and usage ...

@Jacken

Quote:

At this time I used MiamiDX.

MiamiDX has a builtin firewall option.

@Tuxedo

I suppose you want some kind of application like ZoneAlarm on windows. Right?
Well, on AmigaOS you don't need it. Why? Because Amiga OS is fully controllable while windows isn't. What do I mean? On windows there are lot of ways to hide viruses/adware's and so on from user. It's even hard to remove them while you are the administrator of that machine. Windows still able to deny to remove non wanted tasks/etc.
On AmigaOS you can kill even the kernel process if you want. So your freedom is not limited.
Of course, you must know what and how to do, but AmigaOS wasn't a stupid proof OS ever and it is well known.