low-hanging fruit

[Bastien Nocera]

On Thu, 2007-08-16 at 14:17 -0400, Jesse Keating wrote:
> On Thu, 16 Aug 2007 14:10:35 -0400
> Jeremy Katz <katzj at redhat.com> wrote:
> 
> > I'm not against it.  The complaint will be that people will just get
> > failures and not have anything to show them why.  Maybe we can get the
> > quick change into the default firewall rules so that they'll log
> > failures so that it's not at least entirely silent
> 
> +10, that's the most annoying thing to me about our default rules.
> It's so silent.  If we're afraid of it drowning out /var/log/messages
> we could send it to a firewall log file.  But I'm all for dropping
> these from Firstboot and going with our defaults.
> 
> Anybody for firewall2allow?  (:

Maybe Lennart can fix it too? :)

Here's an old entry in my bookmarks:
http://0pointer.de/lennart/projects/fieryfilter/
http://0pointer.de/lennart/projects/fieryfilter/fieryfilter.png

This probably needs UI love, and use of D-Bus instead of Unix sockets
for the admin rights, but the idea is there.