CLI iptables frontend

Joey.Dale · 02-21-2005, 05:01 PM

Hi all,

I am in need of a CLI iptables frontend, any ideas?

Thank You
-Joey

jtshaw · 02-21-2005, 05:19 PM

I'm confused... iptables is a CLI front end is it not?

Joey.Dale · 02-21-2005, 07:08 PM

I mean like a CLI GUI.

jtshaw · 02-21-2005, 07:10 PM

bastille has a ncurses interface telling it what ports you want allowed and such, and then builds a init script automatically at boot. It also does some other security things you might be interested in.

Joey.Dale · 02-21-2005, 07:40 PM

I heard that bastille does not work with Slack

-Joey

sh1ft · 02-21-2005, 10:21 PM

You are correct it does not. This webpage makes a great firewall script if that's what your looking for (I assume it is as if you wanted to learn iptables you would not be looking for a frontend...).

http://easyfwgen.morizot.net/gen/index.php

Just rename the output to rc.firewall and put it in /etc/rc.d/.

Bruce Hill · 02-22-2005, 03:36 AM

Quote:

Originally posted by sh1ft
You are correct it does not. This webpage makes a great firewall script if that's what your looking for (I assume it is as if you wanted to learn iptables you would not be looking for a frontend...).

http://easyfwgen.morizot.net/gen/index.php

Just rename the output to rc.firewall and put it in /etc/rc.d/.

Well, it's not quite that simple, either -- though I don't
know everything -- may I had a helpful pointer to this?

The script generated from that page has an incorrect
path for iptables in Slackware. I quote from the script:

Quote:

# This generator is primarily designed for RedHat installations,
# although it should be adaptable for others.
<snip, snip>
# IPTables Location - adjust if needed

IPT="/sbin/iptables"
IPTS="/sbin/iptables-save"
IPTR="/sbin/iptables-restore"

-- at least for Slack-9.1, 10.0, and 10.1 -- on three of
my comps. It should read:

Code:

IPT="/usr/sbin/iptables"
IPTS="/usr/sbin/iptables-save"
IPTR="/usr/sbin/iptables-restore"

and that generated script has the path without the
leading directory of /usr ...

There might be some other things in that script
which need to be adjusted for Slackware. I don't
really know one way or another, and am not at
all trying to dispute any of the others who've
posted. However, I don't want to think I've got a
firewall running that's not working properly.

Still reading and trying to find out...

peter_robb · 02-22-2005, 07:47 AM

There's a good selection of scripts at the end of this tutorial..

A lot of members here are using Firestarter
or you could look at the list on the LQ Wiki // Security..