Hello All!

https://github.com/FoobarOy/foomuuri

well done


Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.3.5-gentoo-dist (x86_64))
* Origin: gopher://fido.junc.eu/ (2:230/0)

Hey Benny!

:r !lynx -dump -nolist https://github.com/FoobarOy/foomuuri/raw/main/README.md

# Foomuuri

Foomuuri is a multizone bidirectional nftables firewall.

See [wiki](https://github.com/FoobarOy/foomuuri/wiki) for documentation
and [host firewall](https://github.com/FoobarOy/foomuuri/wiki/Host-Firewall)
or [router firewall](https://github.com/FoobarOy/foomuuri/wiki/Router-Firewall) for example configurations.

[Releases page](https://github.com/FoobarOy/foomuuri/releases/latest)
contains tarball and precompiled packages. Help is available via [discussions](https://github.com/FoobarOy/foomuuri/discussions).


## Features

* Firewall zones
* Bidirectional firewalling for incoming, outgoing and forwarding traffic
* Suitable for all systems from personal laptop to corporate firewalls
* Rich rule language for flexible and complex rules
* Predefined list of services for simple rule writing
* Rule language supports macros and templates
* IPv4 and IPv6 support with automatic rule splitting per protocol
* SNAT, DNAT and masquerading support
* Logging and counting
* Rate limiting
* DNS hostname lookup support with dynamic IP address refreshing
* Country database support aka geolocation
* IPsec matching support
* Ability to map certain traffic to separate zones
* D-Bus API
* FirewallD emulation for NetworkManager's zone support
* Raw nftables rules can be used
* Fresh design, written to use modern nftables's features

Life is good,
Maurice

-o -o o- o- o- o- o- -o o- -o o- -o -o o- o- o-
(\ (\ /) /) /) /) /) (\ /) (\ /) (\ (\ /) /) /)
^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ... Fidonet 4K - Sweet Sixteen Penguins of the Apocalypse.
--- GNU bash, version 5.2.15(1)-release (x86_64-pc-linux-gnu)
* Origin: One of us @ (1:153/7001.2989)

Hello All!
https://github.com/FoobarOy/foomuuri
well done

Thanks.

--- BBBS/Li6 v4.10 Toy-6
* Origin: BCG-Box 4 (2:222/2)

Hello Maurice!

06 Jun 2023 23:51, Maurice Kinal wrote to Benny Pedersen:

:r !lynx -dump -nolist https://github.com/FoobarOy/foomuuri/raw/main/README.md

still no gentoo ebuild :)

but its stimple to untar the archive an manuel put it into /usr/local as apricated

after this its started with "foomuuri start"

to see ruleset

nft list ruleset

i like to add policy as it is in shorewall poilicy, anyone ?

i btw think ANYCAST is missing in 0.27

tcpflags chain is missing from shorewall


Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.13.5-gentoo-dist (x86_64))
* Origin: gopher://fido.junc.eu/ (2:230/0)

Hey Benny!

still no gentoo ebuild :)

Hm ...
lynx: Can't access startfile https://github.com/FoobarOy/foomuuri/raw/main/README.md

Given that I originally posted the message you're replying to back on;

<Esc>:r !TZ=UTC date --rfc-3339=sec --date=@1686095467
2023-06-06 23:51:07+00:00

which is almost two years ago, then it should come as no surprise why lynx came up empty handed, and consequently I am left not knowing what the heck you are talking about.

Life is good,
Maurice

-o o- -o o- -o -o -o -o -o o- -o o- o- o- o- o-
(\ /) (\ /) (\ (\ (\ (\ (\ /) (\ /) /) /) /) /)
^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ... Fidonet 4K - Sweet Sixteen Penguins of the Apocalypse.
--- GNU bash, version 5.2.37(1)-release (x86_64-pc-linux-gnu)
* Origin: One of us @ (1:153/7001.2989)

Hej Maurice!

<Esc>:r !TZ=UTC date --rfc-3339=sec --date=@1686095467
2023-06-06 23:51:07+00:00

Found the original in a tar archive I have of backed up raw pkt's by using the date to narrow the search. The important thing is by using the MSGID's serialno as hex character output of the unixdate (unsigned 32-bit integer), makes searching a breeze. Way to go.

I am guessing that this idea is a keeper, no?

Het leven is goed,
Maurice

o- o- o- -o
/) /) /) (\
^^ ^^ ^^ ^^
... Ne mæg non mon nænne cræft forþbringan butan wisdom.
No one can accomplish any skill without wisdom.
--- GNU bash, version 5.2.37(1)-release (x86_64-pc-linux-gnu)
* Origin: Little Mikey's EuroPoint @ (2:280/464.113)

Hello Maurice!

10 Mar 2025 02:17, Maurice Kinal wrote to Maurice Kinal:

I am guessing that this idea is a keeper, no?

shorewall is now really stable software for makeing stable iptables firewalls with, alone that its not developped anymore, eq now no maintainer to breek it, makes it even more stable now :=)

google foomuuri if you need the next step in 2025, hehe


Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.13.6-gentoo-dist (x86_64))
* Origin: gopher://fido.junc.eu/ (2:230/0)

Hey Benny!

now no maintainer to breek it, makes it even more stable now

Heh, heh. That sometimes is true but I won't ever bet the farm on it.

google foomuuri if you need the next step in 2025

One of my medical providers claims that 2025 is my year. All I can say for sure is that I am not dead yet. As for the next step, I haven't taken the first one.

Life is good,
Maurice

-o -o o- o- -o -o o- -o o- o- o- -o o- o- o- o-
(\ (\ /) /) (\ (\ /) (\ /) /) /) (\ /) /) /) /)
^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ... Fidonet 4K - You load sixteen penguins and what do you get?
--- GNU bash, version 5.2.37(1)-release (x86_64-pc-linux-gnu)
* Origin: One of us @ (1:153/7001.2989)

Hello Maurice!

11 Mar 2025 16:44, Maurice Kinal wrote to Benny Pedersen:

now no maintainer to breek it, makes it even more stable now

Heh, heh. That sometimes is true but I won't ever bet the farm on it.

+1

google foomuuri if you need the next step in 2025

One of my medical providers claims that 2025 is my year. All I can
say for sure is that I am not dead yet. As for the next step, I
haven't taken the first one.

i think its nice nftables helper, does not know all details yet, but it did block myself out of internet, its hard to make this happend with shorewall stop :=)

eqant foomuuri block



Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.13.8-gentoo-dist (x86_64))
* Origin: gopher://fido.junc.eu/ (2:230/0)

Hey Benny!

but it did block myself out of internet

An honourable goal for sure.

Speaking for myself, I am finding a lack of interest on my part on the goings on of the internet as time goes on.

Life is good,
Maurice

o- -o -o -o -o o- -o o- o- o- o- -o o- o- -o -o /) (\ (\ (\ (\ /) (\ /) /) /) /) (\ /) /) (\ (\ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ^^ ... Fidonet 4K - You load sixteen penguins and what do you get?
--- GNU bash, version 5.2.37(1)-release (x86_64-pc-linux-gnu)
* Origin: One of us @ (1:153/7001.2989)

Hello Maurice!

25 Mar 2025 15:10, Maurice Kinal wrote to Benny Pedersen:

but it did block myself out of internet

An honourable goal for sure.

+1

Speaking for myself, I am finding a lack of interest on my part on the goings on of the internet as time goes on.

hope that Trump gets an better job with his russians friends, atleast now its more known it was not froad fake news last time of election, sadly usa have the worst president anyone can get for money, he have short lived historicals to remember his fails only protected by fake news teories :=)

sorry to take it up here, its only seen as clowns outside of usa


Regards Benny

... too late to die young :)

--- Msged/LNX 6.1.2 (Linux/6.13.8-gentoo-dist (x86_64))
* Origin: gopher://fido.junc.eu/ (2:230/0)

Hey Benny!

sorry to take it up here, its only seen as clowns outside of usa

Vort ældgamle land under isblinkens bavn.

Life is good,
Maurice

-o -o o- -o
(\ (\ /) (\
^^ ^^ ^^ ^^
... Ne hopa ðu to oþres monnes deaðe; uncuð hwa lengest libbe.
Do not hope for another man's death; it is unknown who will live longest. --- GNU bash, version 5.2.37(1)-release (x86_64-pc-linux-gnu)
* Origin: Little Mikey's Brain - Ladysmith BC, Canada (1:153/7001)