SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264
|Anonymous | Login||2022-08-15 22:01 UTC|
|Main | My View | View Issues | Change Log | Roadmap|
|View Issue Details|
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0002809||Endian Firewall||Proxy SMTP||public||2010-03-31 18:02||2010-09-24 09:03|
|Target Version||future||Fixed in Version|
|Summary||0002809: smtp proxy needs configuration possibility to decide which subnets are local|
|Description||smtp proxy right now calculates which subnets are local by including also routing configuration from openvpn and routing.|
this is not always what one wants, since routed destination networks may also be non-local, if it is 0.0.0.0/0 for example, or something big and external, which may sometimes be used with source routing
So we need something non that intelligent, i.e. only those subnets are considered local which the user configures
or add only obvious local subnets, don't add openvpn and routed networks, but add the possibility to do add them manually and add a checkbox "add all routed subnets"
|Tags||No tags attached.|
edited on: 2010-04-01 07:54
I strongly agree
the best would be two text fields:
1) one with classical networks (green orange blue..) highlighted by default plus suggested networks (taken from vpns and routes) but not selected by default, the user with ctrl can enable them
2) the second could be an empty text field where the user add (one per line) other networks/ip to be considered as local network (this is often requested)
What do you think?
edited on: 2010-04-01 08:02
obviously 0.0.0.0/0 should always be filtered from suggested networks!!!
Maybe there should be a warning near the second text field that a misconfiguration can set the firewall as open relay!
|2010-03-31 18:02||peter-endian||New Issue|
|2010-03-31 18:02||peter-endian||Issue generated from: 0002808|
|2010-03-31 18:02||peter-endian||Relationship added||related to 0002808|
|2010-04-01 07:52||luca-endian||Note Added: 0004105|
|2010-04-01 07:54||luca-endian||Note Edited: 0004105|
|2010-04-01 07:57||luca-endian||Note Added: 0004106|
|2010-04-01 08:02||luca-endian||Note Edited: 0004106|
|2010-09-24 09:03||peter-endian||Status||new => confirmed|
|Copyright © 2000 - 2012 MantisBT Group|