MASON(1)																  MASON(1)

NAME

       mason - interactively create a firewall

SYNOPSIS

       mason < logfile > rulefile

DESCRIPTION

       This manual page briefly documents the mason command.

       mason interactively generates a set of firewall rules for a Linux-based firewall.  This is done by turning on full IP logging, watching the
       logs for connections, and generating rules describing the connections seen.  mason is familiar with most of the quirks of  various  connec-
       tion types (such as ftp and IRC), and can output rules for 2.0.x ipfwadm, 2.2.x ipchains, and Cisco packet filters.

       mason  operates by reading in log file information from standard input and writing firewall rules to standard output.  This allows mason to
       work offline or on a separate system.  Real-time firewall generation can be achieved with a command like tail(1).

       Most users will want to run mason with a user-friendly interface such as mason-gui-text(1).

ENVIRONMENT

       mason is configured using the following environment variables.

       ECHOCOMMAND
	      Sets the type of firewall rules that mason should output to standard out.  Allowed values  include  "ipfwadm"  and  "ipchains".	By
	      default, mason outputs whatever kind of rules are supported by the currently running Linux kernel.

       DOCOMMAND
	      Sets  the  type  of firewall rules that mason should run immediately when a rule is generated.  Allowed values include "ipfwadm" and
	      "ipchains".  By default, mason outputs whatever kind of rules are supported by the currently running Linux kernel.

       HEARTBEAT
	      If set to "yes", mason will output a "+" or "-" to standard error whenever a rule generated by mason has been triggered.

       DYNIP  Set this to the list of interfaces that have dynamically assigned addresses, separated by spaces.

SEE ALSO

       mason-gui-text(1)

AUTHOR

       This manual page was written by Jeff Licquia <jeff@luci.org>, for the Debian GNU/Linux system (but may be used by others).

																	  MASON(1)