Arno's IPTABLES Firewall Script 1.9.0b (Default branch)


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News Arno's IPTABLES Firewall Script 1.9.0b (Default branch)
# 1  
Old 03-03-2009
Arno's IPTABLES Firewall Script 1.9.0b (Default branch)

Arno's IPTABLES Firewall Script is a secure stateful firewall for both single and multi-homed machines. It supports NAT and SNAT, port forwarding, ADSL ethernet modems with both static and dynamically assigned IPs, MAC address filtering, stealth port scan detection, DMZ support, protection against SYN/ICMP flooding, experimental IPv6 support, multi-interface/aliased-IP support, and extensive user definable logging with rate limiting to prevent log flooding. It has plugin support to add extra features (like SSH Brute Force protection and (Racoon) IPSEC support). It is easy to configure and highly customizable. A filter script that makes your firewall log more readable is also included.License: GNU General Public License (GPL)Changes:
Some security issues concerning firewall restart were fixed. An invalid EOL causing blocked hosts to fail was fixed. Invalid sed syntax that caused blocked hosts to fail was corrected. The MAC filter was moved from the main script into a separate plugin. An issue where the OUTPUT policy didn't get applied was fixed. LOG_xxx_INPUT was changed to LOG_INPUT_xxx in the config file. Several plugins were updated.Image

Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
Firewall(3pm)						  LogReport's Lire Documentation					     Firewall(3pm)

NAME
Lire::Firewall - supplies a subroutine enabling TCP and UDP portnumber-to-name mapping SYNOPSIS
use Lire::Firewall qw/:firewall_number2names /; DESCRIPTION
The Lire::Firewall::firewall_number2names converts numbers for network services, as commonly found in firewall log files, to their descriptive names. firewall_revolve FIXME TODO It takes a firewall Lire dlf object as argument, and operates on its to_port, from_port and protocol properties. TCP services, UDP services and ICMP types are supported. SEE ALSO
RPC 792 for ICMP types. VERSION
$Id: Firewall.pm,v 1.5 2006/07/23 13:16:27 vanbaal Exp $ COPYRIGHT
Copyright (C) 2000, 2001, 2002 Stichting LogReport Foundation LogReport@LogReport.org This file is part of Lire. Lire is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with http://www.gnu.org/copyleft/gpl.html. AUTHOR
Francis J. Lacoste <flacoste@logreport.org>. The first Lire implementation of a TCP and UDP portnumber-to-name mapping was written by Plamen Bozukov. Lire 2.1.1 2006-07-23 Firewall(3pm)