Using Apache for remote firewall admin

["Stephen Gutknecht (OBSD Misc)" <IML-OpenBSD-misc@i405.com>]

I am experimenting with using Apache to view log files and ultimately allow
review and updates to ipf.rules.

For security purposes... I'm putting a dedicated interface in the machine
that is ONLY for network admin; it has a private IP address separate from
the gateway one.  This three-interface configuration also works in a bridge
configuration (I currently have two OpenBSD firewalls, one bridging, one
routing-with-NAT).

Has anyone devised web pages/scripts to interface with firewall
configuration?  Something that presents the ipf log files, basic statistics?

Am I safe starting httpd on the firewall box?  I've changed the httpd.conf
to set Listen parameter to only the "admin interface ip address".  Is there
anything else I should do to make sure I'm not opening holes?

Thanks.

  Stephen Gutknecht
  Renton, Washington