Page 1 of 1
Network Access Control (Packetfence ...)
Posted: 14. Dec 2010, 11:57
by schlawi54
If you would like to use SalixOS as a server ...
PacketFence is a Free and Open Source network access control (NAC) system. PacketFence is actively maintained and has been deployed in numerous large-scale institutions.
http://www.packetfence.org/download/releases.html
http://www.linux.com/learn/tutorials/38 ... ss-control
There are not many distributions available that provide an own package for that software
***
EDIT
An alternative software is the brand new released OpenPanel.
http://www.openpanel.com/
Though, it seems hard to get the GPL'ed source currently. Only deb packages released so far.

Re: Network Access Control (Packetfence ...)
Posted: 14. Dec 2010, 21:01
by pwatk
Looks nice but it also looks like dependency hell

.
If you want a diverse firewall then shorewall is in the repository but you'll have to devote some time to learning how to configure it.
Re: Network Access Control (Packetfence ...)
Posted: 15. Dec 2010, 06:06
by schlawi54
pwatk wrote:Looks nice but it also looks like dependency hell

.
What is dependency hell? Come on, only apache, perl and others needed (for Packetfence).
pwatk wrote:
If you want a diverse firewall then shorewall is in the repository but you'll have to devote some time to learning how to configure it.
Yeah, I know shorewall but NAC is more than a firewall.

Re: Network Access Control (Packetfence ...)
Posted: 15. Dec 2010, 21:41
by pwatk
schlawi54 wrote:pwatk wrote:Looks nice but it also looks like dependency hell

.
What is dependency hell? Come on, only apache, perl and others needed (for Packetfence).
I think the the volume of perl modules caught my eye!
If you have the time and interest you could always build and contribute these packages yourself.
schlawi54 wrote:pwatk wrote:
If you want a diverse firewall then shorewall is in the repository but you'll have to devote some time to learning how to configure it.
Yeah, I know shorewall but NAC is more than a firewall.

I wasn't suggesting anything to the contrary.

Re: Network Access Control (Packetfence ...)
Posted: 16. Dec 2010, 13:55
by thenktor
schlawi54 wrote:What is dependency hell? Come on, only apache, perl and others needed (for Packetfence).

Many Perl modules. Probably easier to get all this stuff via CPAN.
schlawi54 wrote:Yeah, I know shorewall but NAC is more than a firewall.

What exactly is it? Seems to be typical "on top of a web server" software that does not really need packaging

Re: Network Access Control (Packetfence ...)
Posted: 17. Dec 2010, 10:32
by pwatk
thenktor wrote:
What exactly is it? Seems to be typical "on top of a web server" software that does not really need packaging

Enterprise network security is the easiest way I can describe NAC. It's fantastic if you have hundreds if not thousands of devices accessing your network!
Re: Network Access Control (Packetfence ...)
Posted: 21. Dec 2010, 14:53
by schlawi54
pwatk wrote:thenktor wrote:
What exactly is it? Seems to be typical "on top of a web server" software that does not really need packaging

Enterprise network security is the easiest way I can describe NAC. It's fantastic if you have hundreds if not thousands of devices accessing your network!
The main point is that you can do all your configuration by web only.
For instance, also snort integration is possible.
http://www.linux.com/learn/tutorials/39 ... acketfence
***
Or, to say it with the words from the homepage of
webmin (another alternative to Packetfence or OpenPanel).
http://www.webmin.com/intro.html wrote:Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely.
Sample package
http://slackware.schoepfer.info/13.1/sl ... 6-1jsc.tgz
... but also on Slackbuilds.org (maybe to use slapt-src?)
http://slackbuilds.org/repository/13.1/system/webmin/
Re: Network Access Control (Packetfence ...)
Posted: 21. Dec 2010, 23:16
by pwatk
I've only taken a quick look but webmin just seams to require basic perl so I've added it to my todo list for 13.2.