acl
Sponsored Links
Sponsored Links
Secleted [ 0 ] software to compare
Results 1 - 15 of about 52
DCE::ACL 0.21
DCE::ACL is a Perl interface to DCE ACL client API. more>>
DCE::ACL is a Perl interface to DCE ACL client API.
SYNOPSIS
use DCE::ACL;
$aclh = DCE::ACL->bind($object);
DCE::ACL provides a Perl interface to the sec_acl_* client API. As the sec_acl_list_t structure is rather complex, additional classes and methods are provided so Perl scripts can deal with it in a reasonable fashion.
DCE::ACL::handle methods
DCE::ACL::handle->bind
See DCE::ACL->bind.
$aclh->num_acls
Returns the number of acls in the sec_acl_list_t structure.
$num = $aclh->num_acls
$aclh->get_manager_types
Equivalent to the sec_acl_get_manager_types function. $manager_types is a array reference.
($num_used, $num_types, $manager_types, $status) =
$aclh->get_manager_types();
If called in a scalar context, only the $manager_types array reference is returned.
$manager = $achl->get_manager_types->[0]; #first manager
$aclh->get_access
Equivalent to the sec_acl_get_access function.
($permset, $status) = $aclh->get_access($manager);
$aclh->get_printstring
Equivalent to the sec_acl_get_printstring function.
$printstrings is an array reference of hash references.
($chain, $mgr_info, $tokenize, $total, $num, $printstrings, $status) =
$aclh->get_printstring($manager);
If called in a scalar context, only the $printstrings reference is returned.
$printstrings = $aclh->get_printstring($manager);
foreach $str (@$printstrings) {
$permstr .=
($str->{permissions} & $entry->perms) ?
$str->{printstring} : "-";
}
$aclh->test_access
Equivalent to the sec_acl_test_access function.
($ok, $status) = $aclh->test_access($manager, $perms);
$aclh->replace
Equivalent to the sec_acl_replace function.
$status = $aclh->replace($manager, $aclh->type_object, $list);
$aclh->lookup
Equivalent to the sec_acl_lookup function. $list is a reference to a sec_acl_list_t structure, blessed into the DCE::ACL::list class. $type is an optional argument which defaults to DCE::ACL-type_object>.
($list, $status) = $aclh->lookup($manager, [$type]);
$aclh->new_list
This method does a lookup, deleting all entries and returns the empty list. $type is an optional argument which defaults to DCE::ACL-type_object>.
($list, $status) = $aclh->new_list($manager, [$type]);
<<lessSYNOPSIS
use DCE::ACL;
$aclh = DCE::ACL->bind($object);
DCE::ACL provides a Perl interface to the sec_acl_* client API. As the sec_acl_list_t structure is rather complex, additional classes and methods are provided so Perl scripts can deal with it in a reasonable fashion.
DCE::ACL::handle methods
DCE::ACL::handle->bind
See DCE::ACL->bind.
$aclh->num_acls
Returns the number of acls in the sec_acl_list_t structure.
$num = $aclh->num_acls
$aclh->get_manager_types
Equivalent to the sec_acl_get_manager_types function. $manager_types is a array reference.
($num_used, $num_types, $manager_types, $status) =
$aclh->get_manager_types();
If called in a scalar context, only the $manager_types array reference is returned.
$manager = $achl->get_manager_types->[0]; #first manager
$aclh->get_access
Equivalent to the sec_acl_get_access function.
($permset, $status) = $aclh->get_access($manager);
$aclh->get_printstring
Equivalent to the sec_acl_get_printstring function.
$printstrings is an array reference of hash references.
($chain, $mgr_info, $tokenize, $total, $num, $printstrings, $status) =
$aclh->get_printstring($manager);
If called in a scalar context, only the $printstrings reference is returned.
$printstrings = $aclh->get_printstring($manager);
foreach $str (@$printstrings) {
$permstr .=
($str->{permissions} & $entry->perms) ?
$str->{printstring} : "-";
}
$aclh->test_access
Equivalent to the sec_acl_test_access function.
($ok, $status) = $aclh->test_access($manager, $perms);
$aclh->replace
Equivalent to the sec_acl_replace function.
$status = $aclh->replace($manager, $aclh->type_object, $list);
$aclh->lookup
Equivalent to the sec_acl_lookup function. $list is a reference to a sec_acl_list_t structure, blessed into the DCE::ACL::list class. $type is an optional argument which defaults to DCE::ACL-type_object>.
($list, $status) = $aclh->lookup($manager, [$type]);
$aclh->new_list
This method does a lookup, deleting all entries and returns the empty list. $type is an optional argument which defaults to DCE::ACL-type_object>.
($list, $status) = $aclh->new_list($manager, [$type]);
Download (0.035MB)
Added: 2007-04-16 License: Perl Artistic License Price:
927 downloads
ngacl Beta2
ngacl project is an effort to give Linux and its filesystems a full blown ACL system, similar to that used by NFSv4 and Windows. more>>
ngacl project is an effort to give Linux and its filesystems a full blown ACL system, similar to that used by NFSv4 and Windows.
With this software, you have 13 different access rights, dynamic inheritance, and audit ACLs. The implementation is filesystem-independent because the kernel parts are an LSM module.
In addition, there is a Samba-VFS module that enables you to alter ACLs with the Windows ACL editor.
Enhancements:
- This release adds working audit ACLs, stability, and semantic enhancements.
<<lessWith this software, you have 13 different access rights, dynamic inheritance, and audit ACLs. The implementation is filesystem-independent because the kernel parts are an LSM module.
In addition, there is a Samba-VFS module that enables you to alter ACLs with the Windows ACL editor.
Enhancements:
- This release adds working audit ACLs, stability, and semantic enhancements.
Download (0.16MB)
Added: 2006-01-09 License: GPL (GNU General Public License) Price:
1386 downloads
AFS::ACL 2.4.0
AFS::ACL is a Perl class to handle the AFS Access Control Lists. more>>
AFS::ACL is a Perl class to handle the AFS Access Control Lists.
SYNOPSIS
use AFS::ACL;
my $acl = AFS::ACL->new({foobar => none}, {anyuser => write});
$acl->set(rjs => write);
$acl->nset(opusl => write);
$acl->remove(rjsnfs => write);
$acl->clear;
foreach my $user ($acl->get_users) {
print " $user ", $acl->get_rights($user), "n";
}
foreach my $user ($acl->nget_users) {
print " $user ", $acl->nget_rights($user), "n";
}
my $ok = $acl->apply(/afs/mpa/home/guest);
my $copy = $acl->copy;
my $rights = AFS::ACL->crights(read);
my $new_acl = AFS::ACL->retrieve(/afs/mpa/home/nog);
$ok = $new_acl->modifyacl(/afs/mpa/home/guest);
NOTE: The following lines are version 1 style: all names are exported by default. This style is deprecated !!!
use AFS; # import all AFS names
use AFS @AFS::ACL; # import just the ACL names
This class provides methods to handle the AFS Access Control Lists (ACL). It is used to create, modify, delete, and reset ACL instances. It has methods to retrieve and to set the ACL list for directories and its files.
These methods have the optional argument FOLLOW. FOLLOW determines which file should be used should PATH be a symbolic link. If FOLLOW be set to 1, then the symbolic link is followed to its target. If FOLLOW is set to 0, then the method applies to the symbolic link itself. If not specified FOLLOW defaults to 1.
<<lessSYNOPSIS
use AFS::ACL;
my $acl = AFS::ACL->new({foobar => none}, {anyuser => write});
$acl->set(rjs => write);
$acl->nset(opusl => write);
$acl->remove(rjsnfs => write);
$acl->clear;
foreach my $user ($acl->get_users) {
print " $user ", $acl->get_rights($user), "n";
}
foreach my $user ($acl->nget_users) {
print " $user ", $acl->nget_rights($user), "n";
}
my $ok = $acl->apply(/afs/mpa/home/guest);
my $copy = $acl->copy;
my $rights = AFS::ACL->crights(read);
my $new_acl = AFS::ACL->retrieve(/afs/mpa/home/nog);
$ok = $new_acl->modifyacl(/afs/mpa/home/guest);
NOTE: The following lines are version 1 style: all names are exported by default. This style is deprecated !!!
use AFS; # import all AFS names
use AFS @AFS::ACL; # import just the ACL names
This class provides methods to handle the AFS Access Control Lists (ACL). It is used to create, modify, delete, and reset ACL instances. It has methods to retrieve and to set the ACL list for directories and its files.
These methods have the optional argument FOLLOW. FOLLOW determines which file should be used should PATH be a symbolic link. If FOLLOW be set to 1, then the symbolic link is followed to its target. If FOLLOW is set to 0, then the method applies to the symbolic link itself. If not specified FOLLOW defaults to 1.
Download (0.18MB)
Added: 2007-03-02 License: Perl Artistic License Price:
966 downloads
Net::ACL::Match::IP 0.07
Net::ACL::Match::IP is a class matching IP addresses against an IP or network. more>>
Net::ACL::Match::IP is a class matching IP addresses against an IP or network.
SYNOPSIS
use Net::ACL::Match::IP;
# Constructor
$match = new Net::ACL::Match::IP(1,10.0.0.0/8);
# Accessor Methods
$netmaskobj = $match->net($netmaskobj);
$netmaskobj = $match->net($net);
$index = $match->index($index);
$rc = $match->match($ip);
__top
This module is just a wrapper of the Net::Netmask module to allow it to operate automatically with Net::ACL::Rule.
<<lessSYNOPSIS
use Net::ACL::Match::IP;
# Constructor
$match = new Net::ACL::Match::IP(1,10.0.0.0/8);
# Accessor Methods
$netmaskobj = $match->net($netmaskobj);
$netmaskobj = $match->net($net);
$index = $match->index($index);
$rc = $match->match($ip);
__top
This module is just a wrapper of the Net::Netmask module to allow it to operate automatically with Net::ACL::Rule.
Download (0.028MB)
Added: 2006-07-27 License: Perl Artistic License Price:
1187 downloads
ACL Policy Daemon for Postfix 0.60
ACL Policy Daemon is a program that communicates with the Postfix MTA using the Policy Delegation Protocol implementing an ACL. more>>
ACL Policy Daemon is a program that communicates with the Postfix MTA using the Policy Delegation Protocol implementing an ACL (Access Control List) system, making very easy to improve and create nice controls on your e-mail traffic. You can use it to verify SPF records to.
The project is developed using Python and has no other dependencies and licensed by GPL version 2.
The rules are loaded from a regular text file. It is planned to load the rules from a SQL database or LDAP directory in the future.
Greylisting functionality will be implemented soon.
For news and updated information about ACL Policy Daemon, you can always check the project page at GNA: https://gna.org/projects/apolicy/
Installation:
You must have Python installed, version 2.3 or above. Run python to check:
miguel@debian:~$ python
Python 2.4.4c0 (#2, Jul 30 2006, 15:43:58)
[GCC 4.1.2 20060715 (prerelease) (Debian 4.1.1-9)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>>
It is very easy to install apolicy. In some distributions, Postfixs daemons are located in /usr/libexec/postfix, check your distribution.
The following commands should do just fine, you must be root:
debian:~# tar zcf apolicy-0.3.tar.gz
debian:~# cp apolicy-0.3/src/apolicy.py /usr/lib/postfix/
debian:~# chmod 755 /usr/lib/postfix/apolicy.py
debian:~# mkdir /etc/apolicy/
debian:~# cp apolicy.conf /etc/apolicy/
debian:~# chmod 644 /etc/apolicy/apolicy.conf
debian:~# echo "apolicy unix - n n - - spawn" >> /etc/postfix/master.cf
debian:~# echo " user=nobody argv=/usr/lib/postfix/apolicy.py" >> /etc/postfix/master.cf
The apolicy.conf is a sample file with examples, you must edit it to fit your needs.
Install the complementary modules for apolicy. We will install 3 packages: apolicy, pyspf and pydns. Note that the directory that contains Python libraries is not the same on all operating systems. Sometimes it is inside /usr/lib or /usr/libexec, and may be named python or python< version >:
debian:~# mkdir /usr/lib/ /site-packages/apolicy
debian:~# mkdir /usr/lib/ /site-packages/spf
debian:~# mkdir /usr/lib/ /site-packages/DNS
debian:~# cp apolicy-0.3/src/apolicy/* /usr/lib/ /site-packages/apolicy
debian:~# cp apolicy-0.3/src/spf/* /usr/lib/ /site-packages/spf
debian:~# cp apolicy-0.3/src/DNS/* /usr/lib/ /site-packages/DNS
debian:~# echo apolicy > /usr/lib/ /site-packages/apolicy.pth
debian:~# echo spf > /usr/lib/ /site-packages/spf.pth
debian:~# echo DNS > /usr/lib/ /site-packages/DNS.pth
Before setting Postfix, it is wise to test apolicy and check if everything is right. The configuration file is loaded by default from /etc/apolicy/apolicy.conf, you can use -c parameter to change to point where your configuration file is. It is possible to debug your configuration using the parameter -d, it will send a lot of output to syslog mail facility:
debian:~# /usr/lib/postfix/apolicy.py -d
The program must keep running and waiting input from stdin. Take a look at mail.log for any problem. You can press ctrl+c to finish it. If no errors happened, then lets move forward.
Finally, add to your main.cf:
smtpd_recipient_restrictions =
reject_unlisted_recipient
...
reject_unauth_destination
check_policy_service unix:private/apolicy
For the size acl works, apolicy need to be called this way:
smtpd_end_of_data_restrictions = check_policy_service unix:private/apolicy
<<lessThe project is developed using Python and has no other dependencies and licensed by GPL version 2.
The rules are loaded from a regular text file. It is planned to load the rules from a SQL database or LDAP directory in the future.
Greylisting functionality will be implemented soon.
For news and updated information about ACL Policy Daemon, you can always check the project page at GNA: https://gna.org/projects/apolicy/
Installation:
You must have Python installed, version 2.3 or above. Run python to check:
miguel@debian:~$ python
Python 2.4.4c0 (#2, Jul 30 2006, 15:43:58)
[GCC 4.1.2 20060715 (prerelease) (Debian 4.1.1-9)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>>
It is very easy to install apolicy. In some distributions, Postfixs daemons are located in /usr/libexec/postfix, check your distribution.
The following commands should do just fine, you must be root:
debian:~# tar zcf apolicy-0.3.tar.gz
debian:~# cp apolicy-0.3/src/apolicy.py /usr/lib/postfix/
debian:~# chmod 755 /usr/lib/postfix/apolicy.py
debian:~# mkdir /etc/apolicy/
debian:~# cp apolicy.conf /etc/apolicy/
debian:~# chmod 644 /etc/apolicy/apolicy.conf
debian:~# echo "apolicy unix - n n - - spawn" >> /etc/postfix/master.cf
debian:~# echo " user=nobody argv=/usr/lib/postfix/apolicy.py" >> /etc/postfix/master.cf
The apolicy.conf is a sample file with examples, you must edit it to fit your needs.
Install the complementary modules for apolicy. We will install 3 packages: apolicy, pyspf and pydns. Note that the directory that contains Python libraries is not the same on all operating systems. Sometimes it is inside /usr/lib or /usr/libexec, and may be named python or python< version >:
debian:~# mkdir /usr/lib/ /site-packages/apolicy
debian:~# mkdir /usr/lib/ /site-packages/spf
debian:~# mkdir /usr/lib/ /site-packages/DNS
debian:~# cp apolicy-0.3/src/apolicy/* /usr/lib/ /site-packages/apolicy
debian:~# cp apolicy-0.3/src/spf/* /usr/lib/ /site-packages/spf
debian:~# cp apolicy-0.3/src/DNS/* /usr/lib/ /site-packages/DNS
debian:~# echo apolicy > /usr/lib/ /site-packages/apolicy.pth
debian:~# echo spf > /usr/lib/ /site-packages/spf.pth
debian:~# echo DNS > /usr/lib/ /site-packages/DNS.pth
Before setting Postfix, it is wise to test apolicy and check if everything is right. The configuration file is loaded by default from /etc/apolicy/apolicy.conf, you can use -c parameter to change to point where your configuration file is. It is possible to debug your configuration using the parameter -d, it will send a lot of output to syslog mail facility:
debian:~# /usr/lib/postfix/apolicy.py -d
The program must keep running and waiting input from stdin. Take a look at mail.log for any problem. You can press ctrl+c to finish it. If no errors happened, then lets move forward.
Finally, add to your main.cf:
smtpd_recipient_restrictions =
reject_unlisted_recipient
...
reject_unauth_destination
check_policy_service unix:private/apolicy
For the size acl works, apolicy need to be called this way:
smtpd_end_of_data_restrictions = check_policy_service unix:private/apolicy
Download (0.034MB)
Added: 2006-12-27 License: GPL (GNU General Public License) Price:
1032 downloads
Citadel 7.10
Citadel is an advanced messaging and collaboration system for groupware and BBS applications. more>>
Citadel is an advanced messaging and collaboration system for groupware and BBS applications. Users can connect to Citadel using any telnet, WWW, or client software.
Among the features supported are public and private message bases (rooms), electronic mail, real-time chat, paging, shared calendaring, address books, mailing lists, and more.
Unlike other collaboration servers, Citadel provides its own data stores and is therefore extremely easy to install; you dont have to "bring your own" email and database because theyre built in.
The server is multithreaded and scalable. In addition, SMTP, IMAP, and POP3 servers are built-in for easy connection to Internet mail. Citadel is both robust and mature; it has been in production since 1987.
Enhancements:
- IMAP ACL support.
- Small enhancements to the calendar service.
- Enhanced support for certain text-mode mobile devices.
<<lessAmong the features supported are public and private message bases (rooms), electronic mail, real-time chat, paging, shared calendaring, address books, mailing lists, and more.
Unlike other collaboration servers, Citadel provides its own data stores and is therefore extremely easy to install; you dont have to "bring your own" email and database because theyre built in.
The server is multithreaded and scalable. In addition, SMTP, IMAP, and POP3 servers are built-in for easy connection to Internet mail. Citadel is both robust and mature; it has been in production since 1987.
Enhancements:
- IMAP ACL support.
- Small enhancements to the calendar service.
- Enhanced support for certain text-mode mobile devices.
Download (0.67MB)
Added: 2007-06-12 License: GPL (GNU General Public License) Price:
528 downloads
Authfail 1.1.6
authfail is a tool for adding IP addresses to an ACL. more>>
Authfail is a program that goes with real time updating on FIFO file and adds IP into netfilter with DROP/REJECT policy in real time. The FIFO file is /dev/authfail. The rejected hosts database is located in /var/log/authfail.
Each time a given host will do an "authentication failure" via syslog, authfail will count it. If this occure more than the parameters given to authfail, the given host will be REJECTED/DROPPED via Netfilter. Whois notification is possible.
authfail may be configured using the /etc/authfail.conf file.
The program is written under the GNU GPL Public License.
Enhancements:
- The Setup.pl file was modified to not notify private RFC 1918 networks during the setup process.
<<lessEach time a given host will do an "authentication failure" via syslog, authfail will count it. If this occure more than the parameters given to authfail, the given host will be REJECTED/DROPPED via Netfilter. Whois notification is possible.
authfail may be configured using the /etc/authfail.conf file.
The program is written under the GNU GPL Public License.
Enhancements:
- The Setup.pl file was modified to not notify private RFC 1918 networks during the setup process.
Download (0.023MB)
Added: 2007-08-21 License: GPL (GNU General Public License) Price:
795 downloads
TangoCMS 2.3.1
TangoCMS offers you many features that help speed up the work flow of creating, and managing, a website that suits your needs. Were focused on bringing you a high quality feature set to ensure you always have latest technologies available to use. more>>
TangoCMS 2.3.1 is a useful system whose ease of use and powerful feature set allows you to quickly and easily create and manage an entire website.
TangoCMS offers many Features to help you manage your website, publish content and speed up your work flow - including a powerful media module to display videos, pictures and audio files!
With an ever growing Community, you will always get the best support with any problems or questions you come across.
Major Features:
- Clean Interface: A unique clean interface not only makes TangoCMS look visually beautiful, it also makes it much easier to work in due to the simplicity of the different interface elements. The visual style can easily be changed through an ever growing selection of themes.
- Easy Content Layout: Both the Main site and AdminCP are easily configurable in terms of content layout, meaning you can choose where things should be to create the perfect environment to work in, and control what content is displayed to your users.
- Flexible Permissions and User Group Management: ACL, Access Control Levels, allows you to fine tune what groups of users have permission to certain content. This allows you to create a powerful structure of content which can be restricted to the different groups. Groups can inherit permissions from each other, allowing you to create an unbeatable chain of permissions.
- Media: Easily upload and share Images, Video and Audio for others to view and leave comments on. Media items can also be added from externals sources, such as YouTube. All Video and Audio files are played through the beautiful FlowPlayer project.
- Open Source: All of TangoCMS is released under open sources licenses, meaning you can modify the code in any way you wish (keeping within the terms of the licenses) - increasing what you can do with TangoCMS to how well you can program!
- RSS Feeds: Generates correctly formatted RSS feeds for your viewers to subscribe to, allowing them to be kept up to date on your websites content.
- Standard Compliant: Your website will be valid and helps ensure forward compatibility with future technologies.
- Update Notifier: Your TangoCMS installation will notify you when a new release is available, helping to ensure you'll always have the latest security and bug fixes as well as feature improvements.
- URL Aliases: Control the structure of your websites URLs by aliases easily and quickly. Alias longer URLs such as 'page/index/about' to a much shorter and human readable 'about'.
- General Features
- Complete Feature Set: TangoCMS is shipped with a complete feature set, allowing you to start creating from the moment it is installed.
- Different Editor Formats: By default, TangoCMS uses MediaWiki Formatting, with the help of a GUI editor. However for those not comfortable with MediaWiki formatting, there is also HTML or PlainText to choose from.
- Easy User Registration: Users can register for an account (if you allow for it) which could allow them to access different content that is otherwise denied to guest users. You can control how users are validated, between Admin Approval, E-Mail Confirmation, or quite simply no conformation.
Enhancements:
- #154: Installer doesn't check if './tmp' subdirectories are writable
- #155: Installer Cappuccino theme needs polish/fixes
- #156: Menu item URL '/' does not link to frontpage
- #157: Article part picker URL, query string is encoded
- #158: Display/Force title does not effect frontpage/requested module
- #159: Pagination URL is incorrect at URL '/admin'
- #160: WYSIWYG Editor styles need improving
- #162: Only modules in SC should use pagination page arg
- #163: '+' char is allowed in URL, causes 404 error
- #166: Possible login redirection loop
Requirements:
- PHP 5.2.0 or greater
- MySQL 4.1 or greater (recommended MySQL 5)
- Webserver - Tested on Apache & Lighttpd (recommended mod_rewrite for SEF, Search Engine Friendly, URLs)
Added: 2009-07-26 License: GPL Price: FREE
downloads
PIX::Walker 1.03
PIX::Walker is a Perl module to process Cisco PIX configs and walk access-lists. more>>
PIX::Walker is a Perl module to process Cisco PIX configs and walk access-lists.
SYNOPSIS
PIX::Walker is an object that allows you to process PIX firewall configs and walk an access-list for matches. PIX OS versions 6 and 7 are supported.
** This module is still in very early development **
Loose ACL matching performed. This means that you can specify as little as a source IP to match what line(s) that IP would match in the ACL on the firewall. Or you can provide every detail including source/dest IPs, ports, and protocol to match a specific line of an ACL. Loose matching allows you to see potential lines in a large ruleset that a single source or destination IP might match.
More than just the first line match can be returned. If your search criteria can technically match multiple lines they will all be returned. This is useful for seeing extra matches in your ACL that might also match and can help you optimize your ACL.
EXAMPLE
use PIX::Walker;
my $config = ... string of full firewall config ... ;
my $fw = new PIX::Walker($config);
my $acl = $fw->acl(outside_access) || die("ACL does not exist");
my $matched = 0;
foreach my $line ($acl->lines) {
if ($line->match(
source => 10.0.1.100,
dest => 192.168.1.3,
port => 80,
protocol => tcp)) {
print "Matched ACL $acl->name ($acl->elements ACE)n" if !$matched++;
print $line->print, "n";
}
}
METHODS
acl($name)
Returns an PIX::Accesslist object for the ACL named by $name.
acls()
Returns an array of PIX::Accesslist objects for each access-list found in the firewall configuration. Returns undef if there is no matching ACL.
alias($string)
Returns the IP of the alias given in $alias. If no alias is found than the string is returned unchanged.
findip($ip, [$trace])
Matches the IP to an existing network-group. Does not validate it within any ACL. If a single group is matched a scalar is returned with the name, otherwise an array reference is returned containing all matches.
* $ip is an IP address to look for.
* $trace is an optional reference to a trace buffer. If an IP is found in a nested group the trace will allow you to find out where it was nested. See tracedump() for more information.
findport($port, [$trace])
Matches the PORT to an existing service-group. Does not validate it within any ACL. If a single group is matched a scalar is returned with the name, otherwise an array reference is returned containing all matches.
* $port is the PORT to look for.
* $trace is an optional reference to a trace buffer. If a PORT is found in a nested group the trace will allow you to find out where it was nested. See tracedump() for more information.
obj($name)
Returns an PIX::Object object for the object-group that matches the $name given.
tracedump($trace)
Prints out the trace dump given. This will allow you to see where IPs and PORTs are being matched within their object-groups even if they are nested.
$matched = $fw->findip($ip, $trace);
$fw->tracedump($trace);
<<lessSYNOPSIS
PIX::Walker is an object that allows you to process PIX firewall configs and walk an access-list for matches. PIX OS versions 6 and 7 are supported.
** This module is still in very early development **
Loose ACL matching performed. This means that you can specify as little as a source IP to match what line(s) that IP would match in the ACL on the firewall. Or you can provide every detail including source/dest IPs, ports, and protocol to match a specific line of an ACL. Loose matching allows you to see potential lines in a large ruleset that a single source or destination IP might match.
More than just the first line match can be returned. If your search criteria can technically match multiple lines they will all be returned. This is useful for seeing extra matches in your ACL that might also match and can help you optimize your ACL.
EXAMPLE
use PIX::Walker;
my $config = ... string of full firewall config ... ;
my $fw = new PIX::Walker($config);
my $acl = $fw->acl(outside_access) || die("ACL does not exist");
my $matched = 0;
foreach my $line ($acl->lines) {
if ($line->match(
source => 10.0.1.100,
dest => 192.168.1.3,
port => 80,
protocol => tcp)) {
print "Matched ACL $acl->name ($acl->elements ACE)n" if !$matched++;
print $line->print, "n";
}
}
METHODS
acl($name)
Returns an PIX::Accesslist object for the ACL named by $name.
acls()
Returns an array of PIX::Accesslist objects for each access-list found in the firewall configuration. Returns undef if there is no matching ACL.
alias($string)
Returns the IP of the alias given in $alias. If no alias is found than the string is returned unchanged.
findip($ip, [$trace])
Matches the IP to an existing network-group. Does not validate it within any ACL. If a single group is matched a scalar is returned with the name, otherwise an array reference is returned containing all matches.
* $ip is an IP address to look for.
* $trace is an optional reference to a trace buffer. If an IP is found in a nested group the trace will allow you to find out where it was nested. See tracedump() for more information.
findport($port, [$trace])
Matches the PORT to an existing service-group. Does not validate it within any ACL. If a single group is matched a scalar is returned with the name, otherwise an array reference is returned containing all matches.
* $port is the PORT to look for.
* $trace is an optional reference to a trace buffer. If a PORT is found in a nested group the trace will allow you to find out where it was nested. See tracedump() for more information.
obj($name)
Returns an PIX::Object object for the object-group that matches the $name given.
tracedump($trace)
Prints out the trace dump given. This will allow you to see where IPs and PORTs are being matched within their object-groups even if they are nested.
$matched = $fw->findip($ip, $trace);
$fw->tracedump($trace);
Download (0.013MB)
Added: 2007-05-12 License: Perl Artistic License Price:
896 downloads
PHP Active Code Library 0.10
PHP Active Code Library (ACL) is a PHP 5 class used to store and call PHP files that are stored in a database. more>>
PHP Active Code Library (ACL) is a PHP 5 class used to store and call PHP files that are stored in a database.
The files are stored in a plain text field and not a binary field. PHP ACL also takes care of include/require calls.
If a file includes another file stored in the database, PHP ACL takes care of getting, generating, and including that file.
<<lessThe files are stored in a plain text field and not a binary field. PHP ACL also takes care of include/require calls.
If a file includes another file stored in the database, PHP ACL takes care of getting, generating, and including that file.
Download (0.013MB)
Added: 2006-07-27 License: GPL (GNU General Public License) Price:
1191 downloads
Auth MemCookie 1.0
Auth MemCookie is an Apache v2 authentification and authorization modules are based on cookie authentification mecanism. more>>
Auth MemCookie is an Apache v2 authentification and authorization modules are based on "cookie" authentification mecanism.
The module dont make authentification by it self, but verify if authentification "the cookie" are valid for each url protected by the module. The module validate also if the "authentificated user" have authorisation to acces url.
Authentification are made externaly by an authentification form page and all authentification information nessary to the module a stored in memcached indentified by the cookie value "authentification session id" by this login page.
How it Works
Phase 1 : The login Form
Authentification are made by a login formular page.
This login page must authenticate the user with any authenticate source (ldap, /etc/password, file, database....) accessible to langage of the page (php, perl, java... an ldap login page sample in php are in samples directory).
Then must set cookie that contain only a key the "authentification unique id" of the "authentification session".
The login page must store authorisation and user information of the authenticated user in memcached identified by the cookie key "authentification unique id".
The login page can be developted in any langage you want, but must be capable to use memcached (they must have memcache client api for us)
Phase 2 : The Apache v2 Module
After the user are logged, the apache 2 module check on each protected page by apache ACL the presence of the "cookie".
if the "cookie" exist, try to get session in memcached with the "cookie" value if not found return "HTTP_UNAUTHORIZED" page.
if session exist in memcached verify if acl match user session information if not match return "HTTP_FORBIDDEN" page.
<<lessThe module dont make authentification by it self, but verify if authentification "the cookie" are valid for each url protected by the module. The module validate also if the "authentificated user" have authorisation to acces url.
Authentification are made externaly by an authentification form page and all authentification information nessary to the module a stored in memcached indentified by the cookie value "authentification session id" by this login page.
How it Works
Phase 1 : The login Form
Authentification are made by a login formular page.
This login page must authenticate the user with any authenticate source (ldap, /etc/password, file, database....) accessible to langage of the page (php, perl, java... an ldap login page sample in php are in samples directory).
Then must set cookie that contain only a key the "authentification unique id" of the "authentification session".
The login page must store authorisation and user information of the authenticated user in memcached identified by the cookie key "authentification unique id".
The login page can be developted in any langage you want, but must be capable to use memcached (they must have memcache client api for us)
Phase 2 : The Apache v2 Module
After the user are logged, the apache 2 module check on each protected page by apache ACL the presence of the "cookie".
if the "cookie" exist, try to get session in memcached with the "cookie" value if not found return "HTTP_UNAUTHORIZED" page.
if session exist in memcached verify if acl match user session information if not match return "HTTP_FORBIDDEN" page.
Download (0.012MB)
Added: 2006-03-15 License: The Apache License 2.0 Price:
1318 downloads
Allegro FTPd 1.0.25
Allegro FTPd is an FTP server for Linux/Solaris written in Allegro Common Lisp. more>>
Allegro FTPd is an FTP server for Linux/Solaris written in Allegro Common Lisp. Because it is written in Common Lisp, one class of security issues, related to buffer overflows, has been eliminated.
Enhancements:
- ftpd.cl: Bumped version number for new binary builds on ACL 7.0
- ftpd.cl: Tweaked the error handling on a few filesystem calls. Now uses *strict-probe-file*.
- ftpd.cl: Fixed for building on FreeBSD 4.10.
- makefile.cl: Use 7.0 lisp for building. Added FreeBSD support.
- rc.aftpd.sh: new for FreeBSD 4.
- readme.txt: Updated to reflect FreeBSD support.
<<lessEnhancements:
- ftpd.cl: Bumped version number for new binary builds on ACL 7.0
- ftpd.cl: Tweaked the error handling on a few filesystem calls. Now uses *strict-probe-file*.
- ftpd.cl: Fixed for building on FreeBSD 4.10.
- makefile.cl: Use 7.0 lisp for building. Added FreeBSD support.
- rc.aftpd.sh: new for FreeBSD 4.
- readme.txt: Updated to reflect FreeBSD support.
Download (2.06MB)
Added: 2005-09-26 License: LGPL (GNU Lesser General Public License) Price:
1492 downloads
Openmailadmin 1.0.0
Openmailadmin is a little administration interface to every complete IMAP mail server daemon. more>>
Openmailadmin is a little administration interface to every complete IMAP mail server daemon. Openmailadmin supports every feature IMAP provides, and fits in most MTA configurations.
A key feature is the non-standard, generic administration hierarchy which not only seperates "normal users" from "administrators", but enables the mailserver-master to create instances between them.
You will be able to let other users create their own sub-users and thus either share a single mail server between different organizations or project your companys employee structure. It excels with features such as regex addresses and folder ACL management.
Installation:
1. Copy all the files into your DocumentRoot-folder.
2. Modify following files by changing usernames and passwords:
- samples/pam/imap
- inc/database.sql
And either of these:
- samples/postfix/*
- samples/oma_mail.daimon.*
3. Create the required database and users in MySQL. Modify database.sql and have it executed inside the new database.
4. Copy samples/pam/imap settings to your /etc/pam.d folder
{{{
chmod 600 samples/pam/imap
cp samples/pam/imap /etc/pam.d/imap
ln -s /etc/pam.d/imap /etc/pam.d/pop
ln -s /etc/pam.d/imap /etc/pam.d/sieve
ln -s /etc/pam.d/imap /etc/pam.d/smtp
}}}
5. For security reasons, remove these files from your DocumentRoot-folder:
{{{
rm inc/database.sql
rm -r samples/pam
rm samples/oma_mail.daimon.* samples/postfix
}}}
<<lessA key feature is the non-standard, generic administration hierarchy which not only seperates "normal users" from "administrators", but enables the mailserver-master to create instances between them.
You will be able to let other users create their own sub-users and thus either share a single mail server between different organizations or project your companys employee structure. It excels with features such as regex addresses and folder ACL management.
Installation:
1. Copy all the files into your DocumentRoot-folder.
2. Modify following files by changing usernames and passwords:
- samples/pam/imap
- inc/database.sql
And either of these:
- samples/postfix/*
- samples/oma_mail.daimon.*
3. Create the required database and users in MySQL. Modify database.sql and have it executed inside the new database.
4. Copy samples/pam/imap settings to your /etc/pam.d folder
{{{
chmod 600 samples/pam/imap
cp samples/pam/imap /etc/pam.d/imap
ln -s /etc/pam.d/imap /etc/pam.d/pop
ln -s /etc/pam.d/imap /etc/pam.d/sieve
ln -s /etc/pam.d/imap /etc/pam.d/smtp
}}}
5. For security reasons, remove these files from your DocumentRoot-folder:
{{{
rm inc/database.sql
rm -r samples/pam
rm samples/oma_mail.daimon.* samples/postfix
}}}
Download (0.064MB)
Added: 2007-06-01 License: GPL (GNU General Public License) Price:
878 downloads
yoursql 0.3
yoursql project is a mysql version fingerprint tool written in C. more>>
yoursql project is a mysql version fingerprint tool written in C.
This will only work on hosts that actually let you connect, if you are blocked by an ACL, this wont work.
<<lessThis will only work on hosts that actually let you connect, if you are blocked by an ACL, this wont work.
Download (0.003MB)
Added: 2007-06-13 License: GPL (GNU General Public License) Price:
865 downloads
Class::NiceApi 0.01.02
Class::NiceApi is a Perl module that translates your methodNames to my method_names. more>>
Class::NiceApi is a Perl module that translates your methodNames to my method_names.
SYNOPSIS
use Class::NiceApi;
my $acl = Class::NiceApi->new( victim => Decision::ACL->new(), style => custom, table => { run_acl => RunACL } );
Perl method names should be written lowercased and multiple words should be connected via _. This is_good_coding_convention. Unfortunately this recommendation is ignored by many CPAN authors. Class::NiceApi helps pernickety programmers as me. It translates method names from isThisPerl to is_this_perl back and forth. Well, it so flexible it can translate allmost anything to anything. So it would translate perl_method_name to java programmers favorite perlMethodName.
METHODS
new()
Takes following parameters (which are also available as methods).
victim
An instance of a class where the method names subjected to translation.
style
A style is just a shortcut for the translation table. Following styles are currently supported: custom, with_underscore and to_lc.
[Note] They are implemented via a translating callback in $Class::NiceApi::callbacks. It filters the source method name and returns the destination name.
table
Here you can list explicit translations of method names, which are exceptions to the custom style filter.
<<lessSYNOPSIS
use Class::NiceApi;
my $acl = Class::NiceApi->new( victim => Decision::ACL->new(), style => custom, table => { run_acl => RunACL } );
Perl method names should be written lowercased and multiple words should be connected via _. This is_good_coding_convention. Unfortunately this recommendation is ignored by many CPAN authors. Class::NiceApi helps pernickety programmers as me. It translates method names from isThisPerl to is_this_perl back and forth. Well, it so flexible it can translate allmost anything to anything. So it would translate perl_method_name to java programmers favorite perlMethodName.
METHODS
new()
Takes following parameters (which are also available as methods).
victim
An instance of a class where the method names subjected to translation.
style
A style is just a shortcut for the translation table. Following styles are currently supported: custom, with_underscore and to_lc.
[Note] They are implemented via a translating callback in $Class::NiceApi::callbacks. It filters the source method name and returns the destination name.
table
Here you can list explicit translations of method names, which are exceptions to the custom style filter.
Download (0.003MB)
Added: 2007-06-20 License: Perl Artistic License Price:
856 downloads
Secleted [ 0 ] software to compare
Copyright Notice:
Software piracy is theft, Using crack, password, serial numbers, registration codes, key generators is illegal and prevent future software development. The above acl search only lists software in full, demo and trial versions for free download. Download links are directly from our mirror sites or publisher sites, torrent files or links from rapidshare.com, yousendit.com or megaupload.com are not allowed
