Search

Got an app to secure?

Helping developers and enterprises secure their code is what we do. Got a project, an RFP, or just some questions? Let us know!

info(at)matasano.com
1-888-677-0666 x0

Sign up for Playbook

Playbook is our product. It does firewall sync. To learn more about Playbook, check out the site, or get in touch with us via the web, e-mail, or phone.

playbook(at)matasano.com
1-888-677-0666 x7529 (PLAY)

« Flint 1.0.5 Released, and a new website too! | Main | Exercises for a burgeoning Army of Ninjas »
Tuesday
Mar022010

Getting Started with Flint

DateMar 2, 2010 at 4:34PM AuthorCraig Brozefsky

In case you haven’t heard, Matasano has released a new open-source product, Flint. Flint is firewall checkup. In short, it is a small web application, written in Ruby, served up in Sinatra. You upload a firewall configuration, and it:

  • Runs a set of “checks” to make sure you didn’t shoot yourself in the foot.
  • Gives you a “report card” view of these checks
  • Figured protocols that can pass thru the firewall, and which hosts can talk to which.

The official Flint website is http://runplaybook.com/flint.

Getting Flint

Flint is available as a Virtual Machine, a source tarball, or you can live on the edge and use git to clone our public repository.

So, go and download it from http://runplaybook.com/flint

Installing Flint

If you are using the FlintVM, then you just start it up, open up a console to the VM and login with flint/flint and determine which IP address it got via DHCP, try ‘ifconfig’. Then point your browser at http://VMIP:4567

If you snagged the tarball or are using the Git repo:

rake install

rake app

And then point your browser at http://localhost:4567

Running Flint

You’ll be prompted for a login, which defaults to ‘admin’ and password ‘admin77’. Once pass the login you’ll see a screen like this:

Congratulations YOU FAIL, because you have no rules! Ok, to remedy that, click the Run New Report button in the upper right-hand corner. You can upload, or paste in, a PIX/ASA configuration, the output of show running-config specifically.

Flint assumes that your interfaces are gonna have names like “outside”, “inside” and “dmz” and maps those into three security realms: External, Internal, and DMZ. The upcoming 1.0.5 release will let you map interfaces to realms yourself, but for now you will need to change the interface names. Sorry.

Comment59 Comments | Reference1 Reference | in

References (1)

References allow you to track sources for this article, as well as articles that were written in response to this article.
  • Response
    Response: 1
    by 1 at 1 on June 20, 2010
    1

Reader Comments (59)

I took 1 st loan when I was a teenager and it helped me very much. However, I require the auto loan also.

April 2, 2010 | Unregistered CommenterAVIS26Vazquez

Looking for essay writer?

May 28, 2010 | Unregistered Commentertyu

Provide high quality silver Tiffany jewellery including necklaces,rings and other style jewelry at wholesale prices.Pick your dreaming
Tiffany jewellery
Tiffany co
Tiffany
Tiffany Stores is the best online United Kingdom jewelry stores where you can buy the cheapest Tiffany & Co silver jewelry.
Our huge selection of Tiffany
Tiffany & Co Rings
Tiffany & Co Earrings
Tiffany & Co Bracelets
Buy cartier ring, cartier love on abcartier.com. We also provide cartier bracelet, cartier jewelry and so on. Now come on and get what you want.
Cartier Jewelry
Cartier jewellery

May 31, 2010 | Unregistered Commenterharry123

Hey there, thank you for being so nice to us, just keep updating here! Pump in style advanced

June 17, 2010 | Unregistered CommenterPump in style advanced

People usually say :"Seeing is believing." GHD Each attempt has a corresponding gain, in part or obvious, or vague. At least we have the kind of satisfaction After I bought this watch ,in a sense,it means a great deal to me. net a porter thank you!it is very useful tools to protect our time.If you never pay attention to yourself ,please grasp this chance.a few days ago,I bought a Rolex watches.IT's very good to use.So i want to write an article about watches to share with everyone on So as to more and more people to konw it. UGG brand is relatively common, in addition to the Rolex ping g15even see watch on the movement and you don't know.
Rolex watches

June 25, 2010 | Unregistered Commenterrolex watches

As for replica louis vuitton bags , the designers have their own brand value, even for their bags. louis vuitton replica bags is so durable and has strong power for water-proof and fire-proof. It relates to their special material. What they used for cheap louis vuitton purses are not leather or other common materials, they use a special material called “Canvas” and add one more material called “PVC” to enhance its water-proof.

July 1, 2010 | Unregistered Commenterlouis vuitton

Thanks for the information i think this is the good way to earn 2nd way of income.
Arizona Nursing Degree

July 2, 2010 | Unregistered CommenterArizona Nursing Degree

Finding the right gift for yourself ,your friends and your relatives in juicy couture,of course ed hardy t shirts and juicy couture jewelry also you good choise.juicy couture jewelry,juicy couture sunglasses,juicy couture handbags,juicy couture charms,juicy couture t shirts,juicy couture bikini,juicy couture tracksuits must be lovely and fun to look at.Juicy couture has over 100 different items available to choose ,such as juicy couture necklaces,juicy couture earrings,juicy couture bracelets,juicy couture wallets,juicy couture swimwear,juicy couture watches,juicy couture sunglasses,juicy couture socks,juicy couture flip flops,Juicy couture sale,Juicy couture sale,juicy couture panties.Birthdays are always worth celebration. Everyone wants to celebrate his/her birthday with others, and you cannot imagine a birthday celebration without juicy couture.

July 5, 2010 | Unregistered Commenterjuicy couture

This 70-290 prepares you for various job roles, which include: systems engineer, systems administrator, network administrator, information systems administrator, technical support engineers, systems analysts, network analysts and technical consultants. If you would like to know more about the Windows Server 2003 Environment 70-290 Exam please visit the Microsoft website. Passing this test will also help you in achieving the MCDBA, MCSA and MCSE Certification. MCITP

July 8, 2010 | Unregistered Commenterliuhan

what a amazing!Glad to read about it,I must say I think well of your suggestion,feels like a pizza,thanks ,pizza,Good job.What I most enjoy is
mini cooper,thanks,My wedding,life is full of variety.
What next?

July 9, 2010 | Unregistered Commenterpizza

Sehen Sie hier die besten gold kaufen wow

July 12, 2010 | Unregistered Commenterabvcd

mortality rate was wow gold considerably higherwow gold at Bariwow gold than in cheap wow goldany buy wow goldknown buy cheap wow goldcases ofbuy wow gold cheap mustard gas wow gold cheapexposure cheapest wow gold everduring wow buy goldWorldcheap wow gold War I.wow gold sale What buying wow goldwas notwow power level investigated inwow gold guide Infield's wow gold cheap Disastergold for wow at Bari wow gold priceswas thewow gold hacks possibility that make wow goldsulfur mustard wow power levelingwas not thewow powerleveling culprit, orwow cd key agent responsiblewow gold for thecheap wow gold casualties, but wow goldsomething elsewow gold cheap altogether.

July 15, 2010 | Unregistered Commenterliping

The nerverunescape money agents were anrunescape gold entirely new concept rs2 goldcompletely unknown to the rs2 powerlevelingAllies until dofus kamasafter the war. They werers2 cd key never used inkamas dofuscombat by the ffxi gilGermans in an final fantasy xi gilabout face from theirbuy ffxi gil aggressive use of Maple Story Mesosother gas agents maple story mesoduring World War I;maplestory mesos some believe ffxi gilthis to ffxi11 gilbe because runescape goldHitler abhorred gas runescape2 powerlevelingas a result of being runescapegold power levelinggassed himselfrunescapegold cd key during World War I. kamas dofusFor whatever buy kamasreason, the Nazis chose dofus kamasnot to use these kamas dofushighly efficient chemical kamas dofusmunitions during dofus kamathe war.

July 15, 2010 | Unregistered Commenterliping

It would wow cd keynot have been beneficial forworld of warcraft cd key the Allies towow leveling provokeworld of warcraft leveling a Germanfinal fantasy xi gil response with their ownfinal fantasy 11 cheap gil gas should it have ffxi gilbeen discovered that the cheap ffxi gilAllies were stockpiling ffxi cheap gilchemical munitions in Italy. ffxi cd keyAdditionally it wasffxi power leveling thought that the NaziRunescape Money propaganda RS2 Goldministry might rs2 power levelingbe able Maple Story Mesoseffectively to useMaple Story meso this incidentmaplestory Mesos against maplestory Mesothe Allies, maple mesosand perhapsmaple story power leveling sway EverQuest 2 goldworld opinioneq2 plat againsteverquest 2 cd key them.EQ2 power leveling It waswow leveling for thesworld of warcraft leveling reasonscheap ffxi gil that Winstonffxi cheap gil Churchill ffxi power levelingandrunescape gold Generalrunescape money Eisenhower rs2 power levelingacted inmaple Story mesos concert to Maple Story mesobury themaple story power leveling truthEverQuest 2 gold. Perhapseq2 plat it was EQ2 power levelinguncomfortable wow cd keyfacts like world of warcraft cd keywhat wow goldhappenedwow power level at Bari ffxi gilthatcheap ffxi gil motivated Churchill ffxi cd keyto once say,runescape gold “In wartimerunescape money, truth ismaple Story mesos so precious Maple Story mesothat she should EverQuest 2 goldalways beeq2 plat attended by a eq2 cd keybodyguard of lies.”

July 15, 2010 | Unregistered Commenterliping

Unfortunately theeve isk details surrounding Bari were eve online isknever fullycity of heroes power leveling divulgedbuy coh influence followingcheapest aion gold theaion online gold war,buy eve isk possibly cheap eve iskfor wow gold eupolitical buy wow goldpurposes,wow geld or buy cheap warhammer goldtoage conan gold avoid cheap archlord goldembarrassmentdaoc gold, or agaia gold combination ofdiablo 2 cd key the twowow gold. In any diablo 2 cd keycase thewow po facts achat gold wowwerewow power leveling buried wow powerlevelingand werewow powerleveling not releasedwow leveling until lineage adenamanysilkroad gold yearssilk road gold later.

July 15, 2010 | Unregistered Commenterliping

very good!

July 20, 2010 | Unregistered Commenterwedding

Discount EasyTone shoes here. Reebok EasyTone wholesale. Reebok Easy Tone on sale.

July 23, 2010 | Unregistered CommenterReebok EasyTone

Fitness shoes of MBT and Vibram Five Fingers are collected at our website. MBT Shoes on sale. MBT Shoes Clearance. You will find high-quality brand shoes at low prices

July 23, 2010 | Unregistered CommenterMBT Shoes

UGG has best price here.Ugg UK Outlet are tremendously popular.UGG Nightfall are available now.

July 23, 2010 | Unregistered CommenterMBT Shoes
Page 1 2 3 Next 25 Comments Most Recent Comment »

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>

Notify me of follow-up comments via email.