注意:

The Funtoo Linux project has transitioned to "Hobby Mode" and this wiki is now read-only.

Difference between revisions of "Package:Firewalld"

From Funtoo
Jump to navigation Jump to search
m (more details)
 
Line 17: Line 17:
=== init ===
=== init ===
{{console|body=###i## rc-update add consolekit
{{console|body=###i## rc-update add consolekit
###i## rc-update add dbus
###i## rc-update add dbus default
###i## rc-update add iptables
###i## rc-update add iptables default
###i## rc-update add ip6tables
###i## rc-update add ip6tables default
###i## rc-update add ebtables
###i## rc-update add ebtables default
###i## rc-update add nftables
###i## rc-update add nftables default
###i## rc-update add firewalld
###i## rc-update add firewalld default
###i## rc}}
###i## rc}}



Latest revision as of 05:58, May 7, 2015

Firewalld

   Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. app-admin/sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with net-misc/networkmanager.

   Warning

firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.

net-firewall/nftables

net-firewall/iptables

Installation

If you would like an application to configure firewalld, set the gui use flag.

root # emerge net-firewall/firewalld

init

root # rc-update add consolekit
root # rc-update add dbus default
root # rc-update add iptables default
root # rc-update add ip6tables default
root # rc-update add ebtables default
root # rc-update add nftables default
root # rc-update add firewalld default
root # rc
   Note

you may need to run rc-service {ip,eb,nf}tables save to enable these services to start

Binaries

firewall-applet (gui systray icon)
firewall-config (gui configuration menus)
firewall-offline-cmd -h (many command line options
firewall-cmd -h (command line back end to firewall-config)
firewalld (command line firewall daemon control)

gui

If the gui is merged in, to load it:

root # firewall-applet

External Resources