control.ps

sifi-0.1.6.tar.gz 出自http://www.ifi.unizh.ch/ikm/SINUS/firewall/ 一个linux的防火墙工具。

7624 5329 m
7654 5393 m
7624 5329 l
7594 5393 l
cp
e
n
7594 5393 m
2 setlinecap
scm
n
7594 5393 m
7654 5393 m
7624 5329 l
7594 5393 l
cp
10 w {flattenpath strokepath f
} stopped {gs stroke gr} if
wc
scm
7594 5393 m
7654 5486 m
7624 5550 l
7594 5486 l
cp
e
n
7594 5486 m
scm
n
7594 5486 m
7654 5486 m
7624 5550 l
7594 5486 l
cp
10 w {flattenpath strokepath f
} stopped {gs stroke gr} if
wc
199 /Helvetica SF
7875 5054 m
99 99 44 111 55 44 111 99 111 44 CP (local disk) K
scm
n
8692 5054 m
7870 4989 m
7870 5273 l
8863 5273 l
8863 4989 l
cp
10 w {flattenpath strokepath 1 g
f
0 g
} stopped {gs stroke gr} if
wc
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
0 0 m
4724 0 l
4724 6799 l
0 6799 l cp
clip n msbeforeclp SM
[1 0 0 1 0 0] setmx
wc
0 setlinecap
2 j
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
472 225 m
4251 225 l
4251 483 l
472 483 l cp
clip n msbeforeclp SM
100 /Palatino-Italic SF
4185 368 m
50 CP (7) K
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
0 0 m
4724 0 l
4724 6799 l
0 6799 l cp
clip n msbeforeclp SM
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
449 506 m
4275 506 l
4275 1664 l
449 1664 l cp
449 1665 m
471 1665 l
471 3968 l
449 3968 l cp
4252 1665 m
4275 1665 l
4275 3968 l
4252 3968 l cp
449 3969 m
4275 3969 l
4275 6320 l
449 6320 l cp
clip n msbeforeclp SM
116 /Palatino-Bold SF
465 6188 m
29 58 CP (2.) K
765 6188 m
97 58 39 64 45 58 64 97 CP (Overview) K
100 /Palatino-Roman SF
465 6014 m
33 39 50 60 26 42 29 26 58 44 29 58 83 26 25 29 48 58 50 60 26 29 55 37 33 58 55 71 26 33 42 26 48 58 33 26 33 55 26 48 56 50 42 60 26 61 58 50 26 58 55 29 33 50 29 29 50 33 42 58 29 26 48 58 33 27 42 48 55 29 39 44 42 48 61 27 29 50 60 58 50 88 27 42 29 58 61 CP (This manual describes the installation and usage of the sf Control Panel, which is part) K
465 5898 m
48 58 33 27 61 50 48 37 27 48 42 50 48 29 60 27 25 29 29 50 83 48 37 29 56 27 33 42 27 48 58 33 27 58 33 29 83 27 39 50 29 29 29 88 50 33 27 33 55 58 27 48 37 50 27 60 55 56 27 33 34 27 25 48 37 50 83 33 33 55 52 27 29 29 50 83 48 37 29 56 27 33 42 28 48 58 33 28 33 55 CP (of the sf Firewall Software. If you are not familiar with the sf Firewall, please read the) K
465 5782 m
39 48 42 78 25 29 29 50 83 48 37 29 56 25 33 42 CP (sf Firewall User) K
100 /Palatino-Roman SF
/redefine { findfont begin currentdict dup length dict begin {
1 index /FID ne {def} {pop pop} ifelse } forall /FontName exch def
dup length 0 ne { /Encoding Encoding 256 array copy def 0 exch {
dup type /nametype eq { Encoding 2 index 2 index put pop 1 add
}{ exch pop } ifelse } forall } if pop currentdict dup end end
/FontName get exch definefont pop } bind def
CP1004 /Font600 /Palatino-Roman redefine
100 /Font600 SF
28 CP (\222) K
100 /Palatino-Roman SF
25 33 42 39 29 33 25 48 61 29 60 76 25 42 CP (s Guide first.) K
465 5607 m
39 48 58 33 29 48 25 58 50 44 25 60 55 58 23 25 48 56 29 58 44 37 50 25 48 58 55 25 58 29 25 39 48 58 33 48 56 55 33 25 61 48 33 60 55 29 39 33 42 29 61 25 48 37 50 25 29 29 50 83 48 37 29 56 25 33 42 25 61 58 50 26 29 48 58 50 60 26 29 55 37 33 58 55 71 26 33 52 CP (Sf Control Panel and sf Firewall are distributed together in one archive. You can either) K
465 5491 m
56 58 50 27 58 55 28 56 29 48 33 50 39 50 60 48 42 28 29 48 58 50 60 28 29 55 37 33 58 55 44 28 48 58 33 28 29 29 50 33 42 58 29 28 39 55 28 48 58 29 58 44 50 88 28 52 60 58 29 61 28 48 88 50 42 28 48 58 33 28 58 55 28 88 48 58 33 28 29 29 50 33 42 58 29 CP (install them on the same Linux machine or install the control panel separately on any) K
465 5375 m
25 33 58 48 88 48 56 50 58 50 88 25 29 29 50 83 48 37 29 33 25 48 33 55 88 48 37 25 39 55 33 25 48 42 60 25 55 33 25 33 58 50 83 25 60 55 56 25 39 48 33 60 60 88 55 44 CP (computer you want to use for remote firewall management.) K
465 5200 m
33 48 29 60 60 50 31 50 56 50 33 31 50 31 42 29 31 58 44 29 58 83 31 25 29 55 55 33 32 33 58 48 88 48 56 50 58 50 88 32 48 58 33 32 25 42 33 39 50 60 32 55 83 33 32 33 55 32 42 33 42 29 42 58 55 44 32 29 48 58 50 60 32 29 55 37 33 58 55 44 32 48 58 61 CP (The control panel consists of two parts: the management tool, which is a Java applet) K
465 5084 m
33 58 48 88 48 56 50 58 50 88 41 48 58 33 41 48 33 60 44 48 52 48 41 55 52 41 25 88 50 39 56 55 37 60 41 56 50 29 48 37 41 50 41 61 58 50 41 25 33 58 48 61 58 48 60 48 61 58 29 41 88 39 55 33 33 50 29 60 42 42 60 58 33 42 61 58 50 CP (and thus platform independent, and a relay program. To execute the management) K
465 4968 m
25 32 48 42 83 55 37 55 47 55 48 83 47 61 48 29 55 50 58 48 33 50 56 50 33 47 39 60 55 56 47 55 33 58 29 47 48 56 50 60 48 33 39 50 33 42 48 48 58 33 48 61 50 55 29 48 55 33 48 61 48 48 58 48 56 29 58 55 48 60 55 56 48 25 42 29 55 55 33 CP (tools, you only need to load the start page into your Java-enabled web browser.) K
465 4852 m
29 50 39 48 56 48 42 49 61 50 58 50 48 56 50 58 50 42 60 58 33 50 61 58 50 50 42 60 55 37 48 56 58 50 61 50 61 48 37 48 61 29 42 58 55 44 50 48 37 50 50 42 33 48 29 60 60 50 50 50 56 50 33 50 25 45 29 48 33 50 58 60 33 39 55 33 58 78 CP (Unfortunately, Java applets are considered dangerous and thus have had several) K
465 4736 m
25 56 42 29 61 25 29 50 44 55 29 25 48 58 33 25 56 58 29 42 42 48 44 44 50 25 88 55 37 33 25 88 48 58 33 25 33 58 48 56 48 37 60 25 33 50 58 33 26 88 48 58 33 26 58 55 26 61 48 42 55 60 88 29 26 42 58 55 29 33 44 29 39 33 42 48 37 26 56 33 29 39 60 44 48 42 CP (security restrictions imposed on them that prevent them from accessing the local disk,) K
465 4619 m
48 61 60 29 48 29 55 52 30 25 42 48 88 50 58 30 33 42 55 58 30 56 39 50 39 33 29 55 39 50 30 56 58 29 56 29 55 42 48 37 30 88 55 37 33 30 58 48 56 48 30 61 58 50 30 42 33 42 55 58 30 56 39 50 39 33 29 55 39 50 30 55 33 30 56 58 29 33 44 48 58 58 55 44 CP (connecting to arbitrary hosts and even from resolving arbitrary host names. To elude) K
465 4503 m
48 58 33 27 33 55 27 33 29 50 58 48 55 27 58 55 27 42 56 42 50 33 27 48 42 48 58 33 27 42 88 39 55 33 39 48 60 27 33 50 58 33 27 88 48 33 42 56 42 28 56 50 29 48 37 28 50 28 56 58 29 42 60 28 88 50 28 34 28 25 42 58 55 29 33 44 29 39 33 42 48 37 28 48 42 48 58 33 CP (these restrictions, I am using a relay system that performs these tasks on behalf of the) K
465 4387 m
61 48 29 29 50 33 42 58 29 26 48 55 26 55 33 26 42 50 58 26 56 50 29 48 37 26 48 58 33 26 61 58 50 26 56 42 29 61 26 29 50 44 55 29 26 48 58 33 26 88 55 37 33 26 61 48 61 50 55 29 26 48 55 26 33 42 60 88 26 33 48 29 60 60 50 26 48 58 61 27 25 33 48 29 60 60 50 CP (applet. The applet must be loaded from the local disk and the relay has to be installed) K
465 4271 m
48 58 33 27 55 33 27 56 29 29 50 44 55 29 27 33 44 48 58 58 55 44 27 55 33 27 61 48 83 55 29 29 50 27 58 48 58 33 27 42 29 27 29 55 55 33 27 33 58 48 88 48 56 50 58 50 88 28 48 58 61 28 25 32 48 33 60 60 88 55 44 28 48 88 50 42 28 48 58 33 28 58 55 CP (on the same computer. The management tool is then allowed to connect locally to the) K
465 4154 m
33 42 60 29 29 29 32 50 32 48 37 60 56 29 56 32 25 56 42 29 61 32 29 50 44 55 29 32 48 58 33 32 42 48 42 42 48 44 44 50 33 61 58 50 33 42 29 29 50 83 48 37 29 33 33 48 58 33 33 55 33 33 42 33 44 48 58 58 55 44 33 58 48 58 33 33 58 44 29 58 83 33 25 45 50 29 48 37 CP (relay, which then connects to the firewalls and accesses the local disk. Figure 1 illus-) K
465 4038 m
25 48 37 60 33 44 48 33 29 58 44 37 50 25 58 55 29 33 50 44 29 58 60 88 88 55 44 25 61 58 50 25 88 48 33 42 56 42 25 48 58 33 25 42 48 33 50 39 33 CP (trates the system and communication architecture.) K
465 1474 m
48 42 58 48 42 58 55 58 31 56 29 48 33 48 29 60 88 55 44 31 48 37 50 31 42 33 58 48 88 60 56 37 50 31 48 42 48 58 33 31 29 29 50 32 33 50 58 33 32 83 55 58 32 33 58 56 29 39 32 56 58 29 56 58 29 58 33 32 48 37 50 32 60 55 56 32 48 55 56 50 95 CP (Maybe you are thinking right now that all these arguments are completely nonsense) K
465 1358 m
48 42 60 50 44 48 55 CP (because) K
685 1188 m
25 50 CP (1.) K
985 1188 m
33 55 60 42 25 33 55 58 25 48 37 50 25 58 44 29 58 83 25 42 33 48 29 60 60 50 25 61 48 58 56 29 42 25 42 48 61 29 56 55 37 60 25 50 25 50 25 33 73 77 33 33 25 33 29 73 25 42 39 48 60 55 29 48 56 48 77 25 50 56 50 33 CP (Java Developers Kit \(JDK\) 1.1 provides signed applets which are not sub-) K
983 1072 m
61 58 50 25 25 42 58 55 29 33 44 29 39 33 42 48 37 25 56 33 29 39 60 44 48 42 25 48 58 33 25 55 33 25 33 44 48 23 CP (ject to the security restrictions, and) K
685 906 m
25 50 CP (2.) K
985 906 m
58 55 61 25 60 55 56 25 33 29 25 58 48 56 48 CP (even if you don) K
100 /Font600 SF
28 CP (\222) K
100 /Palatino-Roman SF
48 58 33 25 58 48 48 83 33 48 55 25 58 55 29 33 44 48 58 58 55 44 25 58 71 61 25 48 58 33 25 42 33 48 29 60 60 50 25 61 48 58 56 29 42 25 48 42 60 25 33 CP (t use signed applets the TCP connection between the) K
983 790 m
25 29 50 44 55 29 25 48 55 25 55 33 25 48 56 50 58 25 33 55 58 25 42 48 55 61 25 56 50 29 48 37 25 48 58 33 25 61 58 50 25 29 55 55 33 25 33 58 48 88 48 56 50 58 50 88 CP (management tool and the relay does not have to be local.) K
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
0 0 m
4724 0 l
4724 6799 l
0 6799 l cp
clip n msbeforeclp SM
SavedState0 restore
eject
%%Page: 8 8
/SavedState0 save def
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
0 0 m
4724 0 l
4724 6799 l
0 6799 l cp
clip n msbeforeclp SM
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
472 225 m
4251 225 l
4251 483 l
472 483 l cp
clip n msbeforeclp SM
100 /Palatino-Italic SF
489 368 m
50 CP (8) K
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
0 0 m
4724 0 l
4724 6799 l
0 6799 l cp
clip n msbeforeclp SM
ic
/msbeforeclp mx cm def n [1 0 0 1 0 0] setmx
449 506 m
4275 506 l
4275 6320 l
449 6320 l cp
clip n msbeforeclp SM
100 /Palatino-Roman SF
465 6205 m
33 60 61 CP (But) K
685 6035 m
25 50 CP (1.) K
985 6035 m
25 42 88 39 55 33 33 50 29 60 25 29 29 50 25 39 55 33 25 48 29 55 50 29 29 50 56 50 25 33 55 58 25 42 29 25 50 33 48 55 25 48 58 33 25 61 58 50 25 48 33 50 33 42 25 50 33 48 55 25 58 29 25 29 29 29 33 42 25 42 29 25 50 25 50 25 73 77 33 CP (JDK 1.1 is still in beta state and the beta is not available for all platforms,) K
983 5919 m
61 48 48 58 25 39 48 56 58 55 29 25 55 58 25 29 29 29 83 25 56 29 55 50 55 55 37 60 25 34 25 42 58 55 29 42 39 48 56 25 48 37 60 33 60 33 25 58 34 33 25 25 52 60 58 29 61 25 39 55 33 25 33 55 58 25 56 29 29 50 29 44 48 60 42 48 CP (especially not for Linux. \(In future versions I probably will no longer need) K
983 5802 m
33 25 42 33 48 29 60 60 50 25 61 48 58 56 29 42 25 55 33 25 48 60 61 25 56 50 29 48 37 25 48 58 33 CP (the relay due to signed applets.\)) K
685 5636 m
25 50 CP (2.) K
985 5636 m
33 58 55 44 25 48 33 55 88 48 37 25 42 78 21 25 58 48 33 33 55 25 48 33 29 60 56 25 56 50 29 48 37 25 48 58 33 25 42 42 48 44 44 50 25 55 33 25 42 50 58 25 29 55 55 33 25 33 58 48 88 48 56 50 58 50 88 25 48 58 61 CP (The management tool has to access the relay quite often. As remote con-) K
983 5520 m
61 29 60 55 83 25 56 48 58 33 25 25 42 58 55 29 33 44 48 58 58 55 44 25 29 50 44 55 29 25 58 50 58 33 25 39 48 83 55 29 42 25 56 29 33 58 56 29 29 42 25 48 55 25 55 33 25 61 58 48 33 25 42 58 55 29 33 44 48 58 CP (nections tend to be slightly slower than local connections, they would) K
983 5404 m
25 48 44 50 33 39 48 33 58 29 25 39 48 42 60 25 48 58 33 25 58 83 55 61 25 83 55 29 42 25 61 58 50 25 48 88 29 33 25 48 42 58 55 60 42 48 37 25 48 42 50 48 37 44 58 29 CP (increase response time and slow down the user interface.) K
685 5238 m
25 50 CP (3.) K
985 5238 m
50 25 58 29 25 42 83 55 58 42 25 58 48 58 33 25 39 48 42 83 55 37 55 25 55 48 83 25 48 58 33 25 58 44 29 58 83 25 42 48 29 29 33 25 29 50 44 55 29 25 42 48 33 29 39 83 25 56 50 29 48 37 25 48 58 61 CP (The relay writes local files which the web browser then shows in a) K
983 5122 m
61 29 60 55 83 25 39 48 42 83 55 37 55 25 55 48 83 25 48 58 33 25 25 29 50 44 55 29 25 33 55 58 25 42 50 83 25 58 55 29 33 44 48 58 58 55 44 25 48 58 33 25 33 34 25 25 74 55 61 58 29 83 25 39 48 42 83 55 37 55 CP (browser window. If the connection was not local, the web browser would) K
983 5005 m
48 58 33 25 58 55 25 39 48 56 39 48 42 25 55 48 83 25 50 25 58 60 38 25 55 33 25 56 58 29 56 50 83 25 25 32 48 56 39 48 42 25 55 48 83 25 50 25 50 29 56 25 48 29 29 33 25 48 58 33 25 42 42 48 44 44 50 25 55 33 25 48 56 50 58 CP (have to access the file via a web server. Having to run a web server on the) K
983 4889 m
33 60 44 48 42 25 56 39 50 42 42 48 44 48 58 58 60 25 42 48 44 60 61 58 29 25 56 29 55 29 42 42 55 60 25 61 58 50 25 33 39 55 33 31 48 25 50 39 33 52 48 25 42 58 50 48 88 25 42 88 48 33 42 56 42 25 56 50 29 48 37 CP (relay systems means extra effort and possibly induces unnecessary secu-) K
983 4773 m
25 42 88 48 29 55 55 37 60 25 56 33 29 39 CP (rity problems.) K
465 4603 m
33 29 31 61 58 50 31 48 29 55 29 42 42 55 60 31 42 50 31 48 29 55 50 33 39 55 60 32 42 50 32 33 29 32 60 48 48 56 32 55 33 32 33 42 48 55 32 56 88 32 48 56 50 56 32 34 32 33 60 61 32 25 71 32 58 29 32 58 48 33 33 29 39 83 32 42 29 32 56 50 29 48 37 32 48 58 61 CP (The relay is written in C. But I gave my best to keep it as portable as possible and it) K
465 4486 m
50 39 61 58 50 39 39 48 29 29 60 88 55 44 39 71 39 50 39 42 48 61 29 56 55 37 60 39 33 50 58 33 39 88 39 55 33 33 50 29 60 39 56 58 50 39 55 33 40 33 29 40 33 39 55 60 40 55 33 40 88 48 29 55 55 37 60 40 55 58 40 48 55 40 61 29 60 55 58 42 CP (should be no problem to port it to any platform that provides a C compiler and a) K
465 4370 m
61 58 50 48 42 29 39 50 29 55 52 48 25 52 60 58 29 61 48 58 55 48 61 48 33 42 48 33 48 58 48 48 55 48 42 50 58 48 56 50 29 48 37 48 48 58 61 48 25 45 39 50 39 55 29 29 48 33 48 56 44 55 42 49 48 29 55 29 33 50 60 88 55 44 49 67 34 83 78 CP (UNIX compatible socket library. The relay has been tested on Linux, Solaris and) K
465 4254 m
25 50 61 52 79 CP (OS/2.) K
465 4080 m
33 55 58 38 55 61 38 56 29 55 50 55 55 37 60 38 60 55 58 36 25 45 33 29 29 29 55 50 33 39 55 60 38 33 44 48 33 31 50 38 56 29 33 58 56 29 29 42 38 56 50 88 38 58 44 29 58 83 39 56 58 29 58 33 39 48 37 55 88 39 48 58 55 39 42 29 39 48 37 48 58 61 CP (There is one more thing which may slightly affect portability. You probably do not) K
465 3963 m
39 60 55 56 41 55 33 41 33 48 58 39 48 33 58 34 42 48 58 33 42 42 42 55 37 44 50 42 29 55 55 33 42 33 58 48 88 48 56 50 58 50 88 42 48 58 33 42 88 55 37 33 42 50 33 50 61 42 33 52 48 33 39 50 48 29 44 42 61 58 48 42 42 55 33 42 33 58 50 83 CP (want to send cleartext data from the management tool across the Internet to your) K
465 3847 m
61 58 50 25 44 29 33 31 50 39 33 25 39 60 55 56 25 55 33 25 58 48 33 42 29 29 26 55 33 26 39 48 61 60 38 33 58 29 26 29 50 29 33 58 48 33 55 60 26 50 26 39 55 33 26 56 42 50 48 26 48 55 26 61 29 60 55 83 26 33 34 26 25 56 44 50 55 26 61 58 50 26 29 29 50 83 48 37 29 33 CP (firewall and back. It would be easy for a potential intruder to listen to your traffic and) K
465 3731 m
33 50 58 33 47 48 33 50 33 42 47 33 58 48 37 39 60 44 47 48 58 33 47 61 58 50 48 58 55 29 33 50 39 60 56 29 33 58 55 44 48 29 29 50 83 48 37 29 33 48 48 58 33 48 33 60 55 55 50 48 58 55 29 33 50 88 39 55 33 58 29 48 29 29 50 48 33 44 50 39 33 52 48 CP (extract all information about the firewall configuration and the current state that) K
465 3615 m
29 29 50 83 48 37 29 33 26 48