0002809: smtp proxy needs configuration possibility to decide which subnets are local

Endian Issue Tracker

Viewing Issue Simple Details [ Jump to Notes ]

[ View Advanced ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0002809

[Endian Firewall] Proxy SMTP

feature

N/A

2010-03-31 20:02

2010-04-01 09:57

Reporter

peter

View Status

public

Assigned To

Priority

normal

Resolution

open

Status

new

Product Version

2.3

Summary

0002809: smtp proxy needs configuration possibility to decide which subnets are local

Description

smtp proxy right now calculates which subnets are local by including also routing configuration from openvpn and routing.

this is not always what one wants, since routed destination networks may also be non-local, if it is 0.0.0.0/0 for example, or something big and external, which may sometimes be used with source routing

So we need something non that intelligent, i.e. only those subnets are considered local which the user configures

or add only obvious local subnets, don't add openvpn and routed networks, but add the possibility to do add them manually and add a checkbox "add all routed subnets"

Additional Information

Tags

No tags attached.

Attached Files

Relationships

related to

0002808

resolved

peter

routing editor should handle 0.0.0.0/0 as a special case in order that it is not considered local subnet

Notes
(0004105) lucagiove (developer) 2010-04-01 09:52 edited on: 2010-04-01 09:54	I strongly agree the best would be two text fields: 1) one with classical networks (green orange blue..) highlighted by default plus suggested networks (taken from vpns and routes) but not selected by default, the user with ctrl can enable them 2) the second could be an empty text field where the user add (one per line) other networks/ip to be considered as local network (this is often requested) What do you think?

(0004106) lucagiove (developer) 2010-04-01 09:57 edited on: 2010-04-01 10:02	obviously 0.0.0.0/0 should always be filtered from suggested networks!!! Maybe there should be a warning near the second text field that a misconfiguration can set the firewall as open relay!

Issue History
Date Modified	Username	Field	Change
2010-03-31 20:02	peter	New Issue
2010-03-31 20:02	peter	Issue generated from	0002808
2010-03-31 20:02	peter	Relationship added	related to 0002808
2010-04-01 09:52	lucagiove	Note Added: 0004105
2010-04-01 09:54	lucagiove	Note Edited: 0004105
2010-04-01 09:57	lucagiove	Note Added: 0004106
2010-04-01 10:02	lucagiove	Note Edited: 0004106

Mantis [^]