1
.TH "ARNO-IPTABLES-FIREWALL" "8" "October 4, 2006" "Michael Hanke" ""
3
\fBarno\-iptables\-firewall\fR \- Single\- & multi\-homed firewall script with DSL/ADSL support.
5
.B /etc/init.d/arno\-iptables\-firewall
6
[start|stop|status|force\-reload|restart]
8
\fBarno\-iptables\-firewall\fP is an iptables configuration script.
9
While it is extremely easy to use one can nevertheless use it in quite
10
complicated environments.
12
All available options are explained in the extensively documented
15
The external interface of the system needs to be set up properly in the
16
firewalls configuration file (EXT_IF).
17
The default behavior of the firewall is to deny all incoming connection
20
For additional requirements not covered by the configuration file
21
custom iptables rules can be placed in
22
/etc/arno\-iptables\-firewall/custom\-rules.
23
This file is automatically parsed by the service script.
25
See the documentation in
26
.I /usr/share/doc/arno\-iptables\-firewall
27
for an example how to manage logging of firewall events through
30
The \fBarno\-fwfilter\fR script can be used to make the firewall logs more readable for humans (see manpage).
32
There is currently only very limited support for IPv6. More precisely one can only allow or deny IPv6 traffic completely, but filtering is not possible (yet).
34
Several plugins for the firewall script are available online. All plugins can
36
.I http://rocky.eld.leidenuniv.nl/iptables-firewall/plugins
37
and have to be stored in /etc/arno-iptables-firewall/plugins. Please see the documentation
38
in /usr/share/doc/arno-iptables-firewall to learn about how to enable them.
43
/etc/init.d/arno\-iptables\-firewall system service script
44
/etc/arno\-iptables\-firewall/firewall.conf firewall configuration
45
/etc/arno\-iptables\-firewall/custom\-rules custom iptables rules
46
/etc/arno\-iptables\-firewall/blocked\-hosts host blacklist
47
/etc/arno\-iptables\-firewall/mac\-addresses mac filter list
50
Please note, that the last two files do exist in the initial configuration and their use is disabled in
51
.B /etc/arno\-iptables\-firewall/firewall.conf
54
.BR arno\-fwfilter "(1)",
58
.I http://rocky.eld.leidenuniv.nl/
61
arno\-iptables\-firewall was written by Arno van Amersfoort <arnova@rocky.eld.leidenuniv.nl>.
63
This manual page was written by Michael Hanke <michael.hanke@gmail.com>,
64
for the Debian project (but may be used by others).