Shoreline Firewall 4.2.4 (Default branch)


 
Thread Tools Search this Thread
Special Forums News, Links, Events and Announcements Software Releases - RSS News Shoreline Firewall 4.2.4 (Default branch)
# 1  
Old 01-02-2009
Shoreline Firewall 4.2.4 (Default branch)

Shorewall is an iptables-based firewall for Linux Systems. Its configuration is very flexible, allowing it to be used in a wide range of firewall/gateway/router and VPN environments. License: GNU General Public License (GPL)Changes:
This release supports creation of IPv6 firewalls as well as IPv4.Image

Image

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
ipkungfu(8)						      System Manager's Manual						       ipkungfu(8)

NAME
ipkungfu - An iptables-based firewall for Linux SYNOPSIS
ipkungfu [ -c ] [ -t ] [ -d ] [ -h ] [ -v ] [ --quiet ] [ --panic ] [ --no-caching DESCRIPTION
ipkungfu is an iptables-based Linux firewall. The primary design goals are security, ease of use, and performance, in that order. It takes advantage of advanced features of iptables, tcpwrappers, and the Linux kernel. It also simplifies the configuration of internet connection sharing, advanced routing, and other networking needs. OPTIONS
-c (or --check) Check whether ipkungfu is loaded, and report any command line options it may have been loaded with. -t (or --test) Runs a configuration test, and displays the results. Note that this does not test or display all configuration options. This gives you an opportunity to verify that major configuration options are correct before putting them into action. -d (or --disable) Disables the firewall. It is important to know exactly what this option does. All traffic is allowed in and out, and in the case of a gateway, all NATed traffic is forwarded (the option retains your connection sharing options). Custom rules are not implemented, and deny_hosts.conf is ignored. -f (or --flush) Disables the firewall COMPLETELY. All rules are flushed, all chains are removed. Any port forwarding or internet connection sharing will cease to work. -h (or --help) Displays brief usage information and exits. -v (or --version) Displays version information and exits. --quiet Runs ipkungfu with no standard output --panic Drops ALL traffic in all directions on all network interfaces. You should probably never use this option. The --panic option is available for the highly unusual situation where you know that an attack is underway but you know of no other way to stop it. --failsafe If ipkungfu fails, --failsafe will cause all firewall policies to revert to ACCEPT. This is useful when working with ipkungfu remotely, to prevent loss of remote access due to firewall failure. --no-caching Disables rules caching feature. FILES
/etc/ipkungfu/ipkungfu.conf /etc/ipkungfu/advanced.conf /etc/ipkungfu/accept_hosts.conf /etc/ipkungfu/deny_hosts.conf /etc/ipkungfu/custom.conf /etc/ipkungfu/log.conf /etc/ipkungfu/redirect.conf /etc/ipkungfu/services.conf /usr/sbin/ipkungfu /usr/share/doc/ipkungfu/AUTHORS /usr/share/doc/ipkungfu/README /usr/share/doc/ipkungfu/FAQ /usr/share/doc/ipkungfu/ChangeLog /usr/share/doc/ipkungfu/COPYING SEE ALSO
iptables(8). January 2003 ipkungfu(8)