Poster of Linux kernelThe best gift for a Linux geek
ARNO-IPTABLES-FIREWALL

ARNO-IPTABLES-FIREWALL

Section: (8) Updated: October 4, 2006
Local index Up
 

NAME

arno-iptables-firewall - Single- & multi-homed firewall script with DSL/ADSL support.  

SYNOPSIS

/etc/init.d/arno-iptables-firewall [start|stop|status|force-reload|restart]  

DESCRIPTION

arno-iptables-firewall is an iptables configuration script. While it is extremely easy to use one can nevertheless use it in quite complicated environments.

All available options are explained in the extensively documented configuration file.

The external interface of the system needs to be set up properly in the firewalls configuration file (EXT_IF). The default behavior of the firewall is to deny all incoming connection attempts.

For additional requirements not covered by the configuration file custom iptables rules can be placed in /etc/arno-iptables-firewall/custom-rules. This file is automatically parsed by the service script.

See the documentation in /usr/share/doc/arno-iptables-firewall for an example how to manage logging of firewall events through syslogd.

The arno-fwfilter script can be used to make the firewall logs more readable for humans (see manpage).

There is currently only very limited support for IPv6. More precisely one can only allow or deny IPv6 traffic completely, but filtering is not possible (yet).

Several plugins for the firewall script are available online. All plugins can be downloaded from http://rocky.eld.leidenuniv.nl/iptables-firewall/plugins and have to be stored in /etc/arno-iptables-firewall/plugins. Please see the documentation in /usr/share/doc/arno-iptables-firewall to learn about how to enable them.  

FILES

/etc/init.d/arno-iptables-firewall              system service script
/etc/arno-iptables-firewall/firewall.conf       firewall configuration
/etc/arno-iptables-firewall/custom-rules        custom iptables rules
/etc/arno-iptables-firewall/blocked-hosts       host blacklist
/etc/arno-iptables-firewall/mac-addresses       mac filter list

Please note, that the last two files do exist in the initial configuration and their use is disabled in /etc/arno-iptables-firewall/firewall.conf  

SEE ALSO

iptables(8), arno-fwfilter(1), syslog.conf(5)

The http://rocky.eld.leidenuniv.nl/ web site.  

AUTHOR

arno-iptables-firewall was written by Arno van Amersfoort <arnova@rocky.eld.leidenuniv.nl>.

This manual page was written by Michael Hanke <michael.hanke@gmail.com>, for the Debian project (but may be used by others).


 

Index

NAME
SYNOPSIS
DESCRIPTION
FILES
SEE ALSO
AUTHOR

This document was created by man2html, using the manual pages.
Time: 22:01:16 GMT, April 16, 2011