참고:

The Funtoo Linux project has transitioned to "Hobby Mode" and this wiki is now read-only.

Difference between revisions of "Package:Firewalld"

From Funtoo
Jump to navigation Jump to search
m (more details)
 
(4 intermediate revisions by one other user not shown)
Line 4: Line 4:
|Homepage=https://fedorahosted.org/firewalld/
|Homepage=https://fedorahosted.org/firewalld/
}}
}}
Firewalld is from our fedora friends.  firewalld comes with a gui if the use flag is activated for it.
Firewalld is from our fedora friends.  Firewalld comes with a gui if the use flag is activated for it.  Firewalld is a daemon that is on top of iptables, ebtables, & nftables.  Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules.  {{package|app-admin/sshguard}} can be used along side firewalld to dynamically block attackers.  Firewalld is very tightly integrated with {{package|net-misc/networkmanager}}.


{{warning|this firewall is very buggy, the init process refuses to stop}}
{{warning|firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things.  it's really bad, pre alpha quality.  go to nftables, or iptables now.  or use the firewalld-0.3.x series.}}
 
== {{package|net-firewall/nftables}} ==
== {{package|net-firewall/iptables}} ==


=== Installation ===
=== Installation ===
If you would like an application to configure firewalld, set the gui use flag.
{{console|body=###i## emerge net-firewall/firewalld}}
{{console|body=###i## emerge net-firewall/firewalld}}
=== init ===
{{console|body=###i## rc-update add consolekit
###i## rc-update add dbus default
###i## rc-update add iptables default
###i## rc-update add ip6tables default
###i## rc-update add ebtables default
###i## rc-update add nftables default
###i## rc-update add firewalld default
###i## rc}}
{{note|you may need to run rc-service {ip,eb,nf}tables save to enable these services to start}}
=== Binaries ===
;firewall-applet  (gui systray icon)
;firewall-config  (gui configuration menus)
;firewall-offline-cmd -h  (many command line options
;firewall-cmd -h  (command line back end to firewall-config)
;firewalld  (command line firewall daemon control)


=== gui ===
=== gui ===
If the gui is merged in, to load it:
If the gui is merged in, to load it:
{{console|body=###i## firewall-applet}}
{{console|body=###i## firewall-applet}}
=== External Resources ===
* https://fedoraproject.org/wiki/FirewallD
{{EbuildFooter}}
{{EbuildFooter}}

Latest revision as of 05:58, May 7, 2015

Firewalld

   Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. app-admin/sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with net-misc/networkmanager.

   Warning

firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.

net-firewall/nftables

net-firewall/iptables

Installation

If you would like an application to configure firewalld, set the gui use flag.

root # emerge net-firewall/firewalld

init

root # rc-update add consolekit
root # rc-update add dbus default
root # rc-update add iptables default
root # rc-update add ip6tables default
root # rc-update add ebtables default
root # rc-update add nftables default
root # rc-update add firewalld default
root # rc
   Note

you may need to run rc-service {ip,eb,nf}tables save to enable these services to start

Binaries

firewall-applet (gui systray icon)
firewall-config (gui configuration menus)
firewall-offline-cmd -h (many command line options
firewall-cmd -h (command line back end to firewall-config)
firewalld (command line firewall daemon control)

gui

If the gui is merged in, to load it:

root # firewall-applet

External Resources