linux-firewall-tool

Summary

The current tool is managing iptables, ip6tables using ipsets. It is created to simplify the Linux firewall configuration at CERN IT Databases Group. It is intended to help SysAdmins that manage firewalls and make changes regularly. It works by parsing simple .ini files which include the configuration in order to build the iptables rules and kernel ipesets.

Contents

• Examples
  • Bidirectional Rules
  • Single rules
  • Log rules
  • Policy
  • Host config
  • List set
  • Visual mapping of config files
• Code
  • ipset_manager
  • iptables_manager
  • host_manager
  • cern_netset_extraction
  • ip_dns_resolve
  • main_nic_extractor
  • other_nic_extractor
  • default_rules
  • generate_files
  • rules_builder
  • rule_map
• Config file options
  • Explanation of the config files for creating rules
  • Explanation of the config files for creating ipsets
  • Explanation of the config files for applying a set of config files to host
• Script Usage
  • Host Manager
  • IPtables Manager

Indices and tables

• Index
• Module Index
• Search Page