1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
<TITLE>The Mason HOWTO: Authors, credits, feedback, copyright, how to help!</TITLE>
<LINK HREF="mason-10.html" REL=previous>
<LINK HREF="mason.html#toc11" REL=contents>
</HEAD>
<BODY>
<IMG SRC="next.gif" ALT="Next">
<A HREF="mason-10.html"><IMG SRC="prev.gif" ALT="Previous"></A>
<A HREF="mason.html#toc11"><IMG SRC="toc.gif" ALT="Contents"></A>
<HR>
<H2><A NAME="s11">11. Authors, credits, feedback, copyright, how to help!</A></H2>
<P> Once again, the linux kernel and firewall developers deserve all
the credit. Mason is simply a front end to a fast, powerful, stable
firewall implementation in the linux kernel. Many thanks to all the linux
firewall developers.
<P>The name "Mason" comes from two sources; first of all, it builds
a (fire)wall. Second, it's my nephew's name. Mason lives in Brooklyn with
my sister and her husband and my niece Eve. He's a great guy!
<P>
<P>If you have comments, suggestions, problems, ideas, flames,
patches, whatever, I'd like to hear them. I'd even be interested in
hearing where Mason fell short for your needs. My permanent email
address is
<A HREF="mailto:wstearns@pobox.com">wstearns@pobox.com</A>. The permanent web site for the software is
<A HREF="http://www.pobox.com/~wstearns/mason/">http://www.pobox.com/~wstearns/mason/</A>.
<P>
<A HREF="mailto:jeff@luci.org">Jeff Licquia</A> has
kindly offered to package up Mason into a Debian package. The Debian
requirements are helping to make a better program for all
distributions.
<P>
<A HREF="mailto:jkn@dde.dk">Jens Knudsen</A> wrote
<A HREF="http://www.linuxzone.dk/nicerules">nicerules</A>, a
wrapper script for Mason. It's a simple script that takes the
"newrules" output, sorts and orders the firewall rules in a way that
makes it easier to review security, and produces a "standalone" firewall
script and a firewall.disable script. The script probably has many
"bugs", use it as an aid, but don't blame him for any problems it may
cause you. There is more information in the actual script which is also
heavily commented. Have fun.
<P>If you choose to send me actual mason firewall rules and choose
to hide the IP addresses and/or networks for security reason, that's
fine, but please replace them with something that describes their
general use so I can make sense of them. For example:
<P>
<HR>
<PRE>
cat myrules | sed -e 's@11.22.33.44/32@fw-outside@' \
-e 's@192.168.1.1/32@fw-inside@' \
-e 's@192.168.1.0/24@inside-net@' \
>myrules.mailable
</PRE>
<HR>
- or something like that.
<P>There are a number of things you can do to help this project:
<UL>
<LI>Send in bug reports.</LI>
<LI>Send in suggestions or fixes.</LI>
<LI>Organize the documentation.</LI>
<LI>Design a logo.</LI>
<LI>Take over the announcement process.</LI>
<LI>Help integrate Mason into your distribution. Heck, just letting me know under which distributions Mason works is helpful!</LI>
<LI>Organize the Web site into a more useful resource.</LI>
<LI>Set up mailing lists for developers, announcements, and users.</LI>
</UL>
<P>The files in the Mason package are Copyright (c) 1998-2002 by
William Stearns
<A HREF="mailto:wstearns@pobox.com">wstearns@pobox.com</A> or
<A HREF="mailto:jeff@luci.org">Jeff Licquia</A>. They are released under the GNU GPL, which is
included in the package. If you did not recieve a copy of this
license, please contact the author for a copy (see the top of the Mason
script for contact information for the author and the Free Software
Foundation).
<P>
<A HREF="http://www.stearns.org/">William</A> is also
the author of
<A HREF="http://www.stearns.org/buildkernel/">buildkernel</A>, the automated Linux kernel builder, and
<A HREF="http://www.stearns.org/">other minor shell scripts</A>.
<P>
<H2><A NAME="ss11.1">11.1 Thanks</A>
</H2>
<P>
<P>Chris Brenton deserves <EM>very</EM> special thanks for spending
an evening with me discussing a number of questions I've had about
packet filtering. He was very kind to share his knowledge with me. I
owe him a pizza sometime. :-)
<P>Chris has written some excellent networking texts - I'm about
halfway through Mastering Network Security and am very impressed with
the writing and content:
<A HREF="http://www.amazon.com/exec/obidos/ASIN/0782120822/geekspeaknet">Multiprotocol Network Design & Troubleshooting</A>,
<A HREF="http://www.amazon.com/exec/obidos/ASIN/0782123430/geekspeaknet">Mastering Network Security</A>.
The above plug was not requested, but is well deserved.
<P>Thanks to Nathan Bailey who took the time to remind me that
there is a Perl Module that's also called Mason. Thanks also to
<A HREF="mailto:swartz@transbay.net">Jonathan Swartz</A>, the
author of
<A HREF="http://www.masonhq.com">HTML::Mason</A> who
graciously agreed to share the name and pointers with me.
<P>Many thanks to Dave Stern, who has offered suggestions on how to
improve Mason and helped with beta testing early versions. Maybe
someday I'll tell him they were prerelease versions... :-)
<P>Thanks to all of the people who have sent in questions, bug
reports, fixes, improvements, and six foot long lizards.
<P>The new section of masonrc with a <EM>boatload</EM> of backdoor
ports is courtesy of the authors of and contributors to snort.
Specifically, Nick Rogness, Jim Forster and Martin Markgraf are credited
with the work on the ports - many thanks, guys.
<P>Snort can be found at
<A HREF="http://www.snort.org">http://www.snort.org</A>. It's a <EM>really</EM> cool intrusion
detection tool. Thanks to Marty
<A HREF="mailto:roesch@clark.net">roesch@clark.net</A> for the tool.
<P>A special thank you to all the authors in the Linux movement.
In a small way, the code I return to the community is my way of paying
back my incredible debt to the people who came before me.
<P>As always, many thanks to my wife Debbie, who has shown amazing
patience with my Linux related projects. Many thanks, my love.
<P>
<HR>
<IMG SRC="next.gif" ALT="Next">
<A HREF="mason-10.html"><IMG SRC="prev.gif" ALT="Previous"></A>
<A HREF="mason.html#toc11"><IMG SRC="toc.gif" ALT="Contents"></A>
</BODY>
</HTML>
|
