adm6 - generate your ip6 filters
simplicity as main concept
convert a ruleset to filtercommands for many machines
python for the best readability of the sources
GNU general public license version 3 or newer
adm6 status - 2013-04-07 - Version 0.2.0
sphinx-docs now available here as we are used to view sphinx-generated docs.
adm6 status - 2013-04-03 - Version 0.2.0
sphinx-docs added, covering main aspects of configuration and whats about setting up a nice demonstration scene. Just do:
git clone https://github.com/sl0/adm6
Perhaps then you light like to point your browser to doc/build/html/index.html
adm6 status - 2013-03-29
It's still growing. Tests status is ok for now, nearly 100% of the sources are covered. Of course, this does not mean, they're without any faults, but we're never sure about that. Next goals are to have some useful documentation:
- Description of possible configuration items and their meanings.
- Description of the rules syntax and options
adm6 where it comes from
Intentionally it was developed for getting a deeper knowledge by doing and a more secure IPv6 networking. First ideas came up, because there was some knowhow about IPv4 and howto filter these packets for better bandwith usage and a more secure way of communications. Simple security policy editor (http://sspe.sourceforge.net) gives an example of a framework, which may be useful to build shell-scripts using iptables for many machines running linux OS. It was written in perl and shell for a linux driven enterprise. Main advantage is a single set of rules for the packetfiltering hosts alltogether. As the concepts of sspe are working well since 2002 until now, adm6 applies them to IPv6 except of the IPv4 specific NAT difficulties.
adm6 how it was started into the public
After a first look into the python universe and after there was a /48 delivered on a leased line, I started to write some plain python files. One of my friends recommended me to put them into a repository, write some explanations and to deposit these on a public place. First choice was http://evolvis.org because of a friendship to one of their maintainers.
At some conferences adm6 was presented:
. LinuxTag 2011, Berlin
. Heise IPv6 Conference, 2011, Frankfurt
. OpenRheinRuhr 2011, Oberhausen
. Secure Linux Administrators Conference 2011, Berlin
. BGNW Frühjahrstagung 2012, Berlin
. GUUG e.V. Frühjahrsfachgespräch 2012, München
. OpenSource-Forum 2012, CeBIT Hannover
People listened, asked a few questions. So I knew my software to be somehow strange but kept on going ...
Some other small python projects came across my way ... I learned about testing python code using nose, and now I'm conviced, every non fully tested software is broken by design. So I started to write tests, because I always wanted it to become a stable and reliable product. I took it file by file, wrote the tests and put the results onto my github profile. There it is.
The old version of adm6 is kept available at http://evolvis.org/projects/adm6 which has a german description only and no tests at all, sorry.