The Official Unofficial Zorp project

One is the freshest zorp and libzorpll code. This is in some aspects even fresher than the one you can find in the official zorp download site, and at least as fresh as the one you can find in Debian. The reason is simple: I am one of the Debian maintainers of zorp and libzorpll, and you can find the mirror of my gnu arch repository here.

The other kind of code is the result of some experiments with Zorp. Don't even expect them to work, but you can find them useful to grab ideas of what can be done with Zorp, or if you find the ideas worth trying, the code can be a starting point to create something interesting. These experiments are gone in two directions: there are almost ready :) proxy modules, and close-to working :) decision layer enhancements. You can expect the following modules to appear in the repository one by one, as I have time to reread them to make sure that there is no confidental data is released with them:

An ldap based config generator.
An ldap based config. Yes, it reads the actual configuration from an LDAP tree.
A decision layer featuring more fine-grained zone definition (with ports), and Mandatory Access Control.
An add-on which allows for a more intuitive configuration style than the one you can find in the upstream. This one is actually works for me.
A replacement of the AnyPy proxy module, with another design and less shortcomings.
A H.323 proxy module draft. Unfortunately it depends on ptlib and openh323, which means C++.

1.2 Plans for the long run

I plan to make this a place, where you can find:

configuration examples
documentation
code which is not yet integrated to the mainstream zorp-gpl code
features too advanced for the average firewall administrator
enhancements which diverge from the official zorp-gpl
experimental code from the developers of BalaBit
code, configuration and documentation provided by the community (You)
zorp-gpl itself

Next Previous Contents