|
Published Articles >> Table of Contents >> Abstract
Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07)
p. 276
Policy-Based Parametric Firewall Configuration: A Real-Case Application
1 Marchi, Univ. di Milano, Italy
1 Penzo, Regione Lombardia, Italy
1 Provetti, Univ. di Messina, Italy
Full Article Text:
 
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/POLICY.2007.34
Send link to a friend
| Abstract |
|
We describe a simple policy language for setting up and running firewalls (FW). The language allows to describe sophisticated policies for controlling network connections. Composition is done at set-up time, when a parser, starting from a given policy, generates the relative configuration file for one or more firewalls operating the industry-standard Linux Iptables kernel extension. The policy captures the essence of the desired requirements and constrains upon connections between zones. The language has been designed and it is currently on testing in the context of a large intra/extranet with more than 10,000 assigned IP addresses.
|
 Additional Information
|
Citation:
1 Marchi, 1 Penzo, 1 Provetti,
"Policy-Based Parametric Firewall Configuration: A Real-Case Application,"
policy,
p. 276,
Eighth IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY'07),
2007
|
|
