The Funtoo Linux project has transitioned to "Hobby Mode" and this wiki is now read-only.
Difference between revisions of "Package:Firewalld"
Threesixes (talk | contribs) m (more details) |
Threesixes (talk | contribs) m (more details) |
||
| Line 24: | Line 24: | ||
###i## rc-update add firewalld | ###i## rc-update add firewalld | ||
###i## rc}} | ###i## rc}} | ||
{{note|you may need to run rc-service {ip,eb,nf}tables save to enable these services to start}} | |||
=== Binaries === | |||
;firewall-applet (gui systray icon) | |||
;firewall-config (gui configuration menus) | |||
;firewall-offline-cmd -h (many command line options | |||
;firewall-cmd -h (command line back end to firewall-config) | |||
;firewalld (command line firewall daemon control) | |||
=== gui === | === gui === | ||
Revision as of 03:16, May 7, 2015
Firewalld
We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.
Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. app-admin/sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with net-misc/networkmanager.
firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.
net-firewall/nftables
net-firewall/iptables
Installation
If you would like an application to configure firewalld, set the gui use flag.
root # emerge net-firewall/firewalld
init
root # rc-update add consolekit root # rc-update add dbus root # rc-update add iptables root # rc-update add ip6tables root # rc-update add ebtables root # rc-update add nftables root # rc-update add firewalld root # rc
you may need to run rc-service {ip,eb,nf}tables save to enable these services to start
Binaries
- firewall-applet (gui systray icon)
- firewall-config (gui configuration menus)
- firewall-offline-cmd -h (many command line options
- firewall-cmd -h (command line back end to firewall-config)
- firewalld (command line firewall daemon control)
gui
If the gui is merged in, to load it:
root # firewall-applet
External Resources