This repository contains an extension to the Minix operating system which includes a firewall in the TCP/IP stack. For more information, see the Report.pdf file in the root directory.
- Davis Freimanis (davisf@kth.se)
- Thomas Peterson (thpeter@kth.se)
- Emelie Eriksson (emee@kth.se)
- Marcus Lignercrona (mlig@kth.se)
Compile the code using releasetools and then run Minix using the command that releasetools generates for you. Add the flags for network access inside Minix.
./releasetools/x86_hdimage.sh
qemu -device e1000,netdev=net0 -netdev user,id=net0,hostfwd=tcp::xxxx-:yyyy
xxxx corresponding the the port on the local machine and yyyy corresponding to the port on vm. For example with xxxx = 5555 and yyyy = 22.
When you boot Minix, run the commands below to enable internet access.
netconf
service network restart
You should now have the IP address 10.0.2.15 when you run ifconfig
.
Dropped packets are logged to a logfile located in /var/log/fwdec
. Debuging output is also available to stdout by setting the FWDEC_DEBUG
flag to 1 in fwdec/fwdec.h
. After running some commands that generate traffic run:
cat /var/log/fwdec
Testing instructions can be found in the file test.md.