PHP frontend for NuConntrack
Overview
This is a PHP frontend for monitoring and altering netfilter connections using NuConntrack.
This frontend is primarily design to integrate EdenWall, the authenticating firewall.
PHP frontend for NuConntrack is a free software released under GNU General Public License. Please see COPYING file for further informations.
Authors
Contact us: NuConntrack Development Team <pyctd-dev AT inl.fr>
- Main author: Damien Boucard (aka Hackter) <damien.boucard AT inl.fr>
- Maintainer: Victor Stinner <victor.stinner AT inl.fr>
- Éric Leblond <eric.leblond AT inl.fr>
Get it !
Tarball releases
Download pyctd-php-0.4.7.tar.gz (2008-11-20)
GNU/Linux packages
- Debian Etch : pyctd-php_0.4.2-1_all.deb
Subversion
Check out our latest subversion head with :
svn checkout http://software.inl.fr/svn/mirror/edenwall/pyctd/trunk/frontends/php pyctd-php
Dependances
- Apache 1.3 (works with 2.0)
- PHP 4 (works with 5)
- phpxmlrpc
- NuConntrack 0.4
- Optionnal :
- CURL support for PHP (mandatory if you run NuConntrack throw HTTPS)
Install
- Adapt htdocs/include/config.php to match it with your configuration ;
- Configure Apache to serve "htdocs/" content ;
For example:
Alias /conntrack/ "/absolute/path/to/htdocs/"
- Security note:
Since connection managed by netfilter can be closed and altered, it is strongly recommended to restrict access to this web interface. Use it on localhost only or configure authentification with Apache.
- Reload Apache daemon ;
Contribute
Contributors are welcome !
If you want to implement one of those features, please contact us, we can create you a Trac account.
- Using a javascript calendar for setting timeout
- Auto-refreshing page with a given duration
- Enhancing sorting by IP adresses (currently, lexicographical order)
- Enhancement for automagically choosing between bytes/kB/MB unities
- Overriding /etc/services to add custom associations TCP port <--> service name in conf file
- Doing reverse DNS on IP addresses
- Managing IPv6
- Enhancing ICMP displaying
- Managing QoS at server-side (and linking it to StarQos conf)
- Ability to submit the filter bar by pressing ENTER
- Find a more intuitive location for the "OK" button (confusion with "kill" button)
- Enhancing pagination by display direct links to each page
- Adding translation of htdocs/include/messages.inc in other languages

