secgroup / mignis Goto Github PK

I just finished reading "Mignis: A semantic based tool for firewall configuration"
And I want know about "Mignis" technical proofs at reference 36 on this paper

I couldn't find the relevant information on this paper[36] on the Internet.

Where can I find relevant information about it?

Thanks a lot!

Hi,

I just played around with mignis. I tried the following rule:

* > local:22  tcp --sports 22

_check_filters should prevent me from doing this. However, when it is called, my offending string --sports is not in the variable filters but in the variable protocol:
https://github.com/secgroup/Mignis/blob/master/mignis.py#L45

As a result, the rule loads fine without a warning.

Hello,
it seems that mignis is not writing correctly a custom rule to file.

This is my mignis config file:

(.. snip ..)
CUSTOM
-A PREROUTING -t nat -i wan ! -s 10.0.0.0/24 -p udp --dport 53 -j DNAT --to-destination 10.0.0.1:9999

The rule is missing a space in the iptables rules' file:

(.. snip ..)
-A PREROUTING-i wan ! -s 10.0.0.0/24 -p udp --dport 53 -j DNAT --to-destination 10.0.0.1:9999

Adding an additional space after -t nat didn't solve the issue.