search

brownsys / pane-sshguard

PANE-enabled version of SSHGuard
http://pane.cs.brown.edu
0 stars 0 forks source link

How do we want to design this? #1

Open adferguson opened 12 years ago

adferguson commented 12 years ago

In the original experiments, we created wrapper scripts which spoke to the PANE server. Then, SSHGuard had a simple firewall which simply called those wrapper scripts.

A self-contained design would introduce a firewall backend which speaks to the PANE server natively (for example, the hosts file and ipfw backends are specialized like this). However, this design would require a fair bit of C programming (do we want a library for this anyway?) and would be more brittle, as the current method to configure SSHGuard's firewall backs is to do so at compile time (!).

arjunguha commented 12 years ago

Go with wrapper script, IMO. Hacking it up in C++ doesn't prove anything, IMO.

adferguson commented 12 years ago

yeah, except we'll need a C++ implementation anyway for Ekiga...