From r.niederberger at fz-juelich.de Mon Oct 24 08:02:42 2011 From: r.niederberger at fz-juelich.de (Niederberger, Ralph) Date: Mon, 24 Oct 2011 15:02:42 +0200 Subject: [Fvga-wg] New OGF document "Firewall Traversal Protocol" in public comment Message-ID: Dear all, The document " Firewall Traversal Protocol (FiTP)" has begun public comment on 2011-10-18. Description: Firewalls control traffic flows between internal and external communication partners. Mostly traffic from inside to outside is allowed, but traffic coming from outside must be explicitly configured. The rules which packets may traverse the firewall and which not are normally configured manually by firewall administrators. To speed up such kind of access list changes, it would be desirable to dynamically signal access requests and automatically change those access lists. Though some protocols are inspectable by firewalls already like FTP, SIP and H.323, a general protocol, which could be used for signaling dynamically required access rules, is not available until now. This paper proposes a standard protocol, which would allow such signaling in a secure manner. Firewalls which have installed a corresponding inspection module could be configured automatically, which would ease the configuration of such systems a lot. Please visit: http://www.ogf.org/gf/docs/comment.php?id=381 and consider reading and providing feedback. A brief affirmation is very useful to demonstrate community input and support. More detailed analysis is also, of course, welcome. All documents in public comment are accessible here: http://www.ogf.org/gf/docs/?public_comment Please also feel free to forward this email to further interested people, so that a maximum of feedback can be gained. Best regards Ralph Niederberger *************************************************** Ralph Niederberger Juelich Supercomputing Centre Institute for Advanced Simulation Phone: +49 2461 61-4772 Fax: +49 2461 61-6656 E-Mail: r.niederberger at fz-juelich.de WWW: http://www.fz-juelich.de/jsc/ JSC is the coordinator of the John von Neumann Institute for Computing and member of the Gauss Centre for Supercomputing *************************************************** Forschungszentrum J?lich GmbH 52425 J?lich Sitz der Gesellschaft: J?lich Eingetragen im Handelsregister des Amtsgerichts D?ren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDirig Dr. Karl Eugen Huthmacher Gesch?ftsf?hrung: Prof. Dr. Achim Bachem (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt, Prof. Dr. Sebastian M. Schmidt *************************************************** -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5713 bytes Desc: not available Url : http://www.ogf.org/pipermail/fvga-wg/attachments/20111024/dd045c8d/attachment.bin