Comments on: Java Firewall Project

By: David Martineau

David Martineau — Thu, 27 Dec 2007 20:18:06 +0000

I think there is a definite need for a firewall that can be easily managed by a consumer. Perhaps there is one out there and I have yet to find it. I like the idea of Java, simply because it is a language I am familiar with.

Have you considered a Linksys/Linux/Java solution. Linksys as I understand it produced a version of their wireless router that can run linux. If you used linux for the OS communication and used Java to provide a web-based UI and to interact with linux and put the whole thing in a linksys like hardware– you might have something valuable.

My opinion of security at the desktop level is low. It chews up system resources and gives consumers a false sense of control. Stateful packet inspection at a hardware based firewall with the ability to establish “trust zones” or “white lists” would be invaluable.

By: Angsuman Chakraborty

Angsuman Chakraborty — Wed, 08 Aug 2007 10:25:14 +0000

Khairul,

“Java is slow” is an age old myth, not reality; get over it.

By: khairul

khairul — Wed, 15 Nov 2006 20:40:45 +0000

from my experience using java application it is slow and memory hungry. I have to upgrade more my RAM to ensure it’s running well.

By: Angsuman Chakraborty

Angsuman Chakraborty — Wed, 24 May 2006 11:38:47 +0000

> Are we there yet ?
In my preliminary investigation and prototype we have all the technologies to develop a Firewall in Java for Windows. We will however need some native calls which can be easily taken care of.

> What is going to be the overhead for a pure java implementation ?
I don’t think performance will be an issue. In any case we always have the option to use native modules. I seriously doubt we will need it.

> Will ordinary desktop users like it ?

That my friend only time will tell. It will be more functional than any of the popular Firewall in market today.

> I would think implementing it in C# (for Windoes) would be relatively easy than Java.

There are libraries to simplify JNI.

By: anjan bacchu

anjan bacchu — Wed, 24 May 2006 00:10:53 +0000

hi there,

+1.

just a moment ago, I saw someone expressing a desire for Java VOIP server. Now, you’re expressing a desire for a Firewall.

Are we there yet ? What is going to be the overhead for a pure java implementation ? Will ordinary desktop users like it ?

I can offer to test it on my box.

BR,
~A

By: Kris

Kris — Tue, 23 May 2006 20:02:57 +0000

Writing a Java firewall could be difficult because of the complexity involved with JNI. Obviously you cant write a firewall without getting into the OS’s TCP stack. It also depends on which OS you are trying to implement. You might get a lot of help with Linux but with Windows you are pretty much on your own. But that said, there are couple of implementations I saw on codeproject using managed code. Because it is easy to get at OS level APIs with C# (PInvoke and C++/CLI) I would think implementing it in C# (for Windoes) would be relatively easy than Java.