Firewalld

Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

Firewalld is from our fedora friends. Firewalld comes with a gui if the use flag is activated for it. Firewalld is a daemon that is on top of iptables, ebtables, & nftables. Firewalld inserts rules dynamically with out having to restart the kernel layer firewalls, and has interfaces to insert manual iptables, ip6tables, ebtables, and nftables rules. app-admin/sshguard can be used along side firewalld to dynamically block attackers. Firewalld is very tightly integrated with net-misc/networkmanager.

Warning

firewalld-0.2.x is very buggy under gentoo & funtoo, the init process refuses to stop among other things. it's really bad, pre alpha quality. go to nftables, or iptables now. or use the firewalld-0.3.x series.

`net-firewall/nftables`

`net-firewall/iptables`

Installation

If you would like an application to configure firewalld, set the gui use flag.

root # emerge net-firewall/firewalld

init

root # rc-update add consolekit
root # rc-update add dbus default
root # rc-update add iptables default
root # rc-update add ip6tables default
root # rc-update add ebtables default
root # rc-update add nftables default
root # rc-update add firewalld default
root # rc

Note

you may need to run rc-service {ip,eb,nf}tables save to enable these services to start

Binaries

firewall-applet (gui systray icon)
firewall-config (gui configuration menus)
firewall-offline-cmd -h (many command line options
firewall-cmd -h (command line back end to firewall-config)
firewalld (command line firewall daemon control)

gui

If the gui is merged in, to load it:

root # firewall-applet

External Resources

https://fedoraproject.org/wiki/FirewallD

Package:Firewalld