Latest revision as of 05:58, May 7, 2015

Firewalld

Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. app-admin/sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with net-misc/networkmanager.

Warning

firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.

`net-firewall/nftables`

`net-firewall/iptables`

Installation

If you would like an application to configure firewalld, set the gui use flag.

root # emerge net-firewall/firewalld

init

root # rc-update add consolekit
root # rc-update add dbus default
root # rc-update add iptables default
root # rc-update add ip6tables default
root # rc-update add ebtables default
root # rc-update add nftables default
root # rc-update add firewalld default
root # rc

Note

you may need to run rc-service {ip,eb,nf}tables save to enable these services to start

Binaries

firewall-applet (gui systray icon)
firewall-config (gui configuration menus)
firewall-offline-cmd -h (many command line options
firewall-cmd -h (command line back end to firewall-config)
firewalld (command line firewall daemon control)

gui

If the gui is merged in, to load it:

root # firewall-applet

External Resources

https://fedoraproject.org/wiki/FirewallD

@@ Line 4: / Line 4: @@
 |Homepage=https://fedorahosted.org/firewalld/
 }}
-Firewalld is from our fedora friends.  firewalld comes with a gui if the use flag is activated for it.  firewalld is an alternative to iptables & nftables.
+Firewalld is from our fedora friends.  Firewalld comes with a gui if the use flag is activated for it.  Firewalld is a daemon that is on top of iptables, ebtables, & nftables.  Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules.  {{package|app-admin/sshguard}} can be used along side firewalld to dynamically block attackers.  Firewalld is very tightly integrated with {{package|net-misc/networkmanager}}.
-{{warning|firewalld is very buggy under gentoo & funtoo, the init process refuses to stop among other things.  it's really bad, pre alpha quality.  go to nftables, or iptables now.}}
+{{warning|firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things.  it's really bad, pre alpha quality.  go to nftables, or iptables now.  or use the firewalld-0.3.x series.}}
 == {{package|net-firewall/nftables}} ==
@@ Line 12: / Line 12: @@
 === Installation ===
+If you would like an application to configure firewalld, set the gui use flag.
 {{console|body=###i## emerge net-firewall/firewalld}}
+=== init ===
+{{console|body=###i## rc-update add consolekit
+###i## rc-update add dbus default
+###i## rc-update add iptables default
+###i## rc-update add ip6tables default
+###i## rc-update add ebtables default
+###i## rc-update add nftables default
+###i## rc-update add firewalld default
+###i## rc}}
+{{note|you may need to run rc-service {ip,eb,nf}tables save to enable these services to start}}
+=== Binaries ===
+;firewall-applet  (gui systray icon)
+;firewall-config  (gui configuration menus)
+;firewall-offline-cmd -h  (many command line options
+;firewall-cmd -h  (command line back end to firewall-config)
+;firewalld  (command line firewall daemon control)
 === gui ===
 If the gui is merged in, to load it:
 {{console|body=###i## firewall-applet}}
-=== init ===
-to start:
-{{console|body=###i## /etc/init.d/firewalld start}}
-to stop:
-{{console|body=###i## pkill -9 firewalld && /etc/init.d/firewalld stop}}
-probably required:
-{{console|body=###i## rc-update add consolekit
-###i## rc-update add dbus}}
 === External Resources ===
 * https://fedoraproject.org/wiki/FirewallD
 {{EbuildFooter}}

Difference between revisions of "Package:Firewalld"