Bug 27192 – /etc/init.d/firewall (New Script)

• Status: RESOLVED WONTFIX
• Product: Gentoo Linux

[Description Stephen K. Benjamin 2003-08-23 14:44:45 UTC]

This is a fairly flexible firewall script that I wrote. It started out pretty
simple with concrete rules and settings, but now has a fairly configurable
/etc/conf.d/firewall.  It suits all the purposes I need it for, perhaps someone
else might find it useful or make improvements.

[Comment 1 Stephen K. Benjamin 2003-08-23 14:46:50 UTC]

Created attachment 16512 [details]
/home/blcknight/asdf/firewall.tar.gz

[Comment 2 crontraconstantium 2004-07-10 11:27:25 UTC]

This only blocks certain incoming connections, it should be able to allow certain incoming ports and other outgoing ports e.g.

   ALLOW_OUT_TCP="ftp ssh http rsync"
   ALLOW_IN_TCP="ssh"
   ALLOW_OUT_UDP="domain"
   ALLOW_IN_UDP=""

in conf.d/firewall.

   ${IPT} -P OUTPUT DROP

should be added to init.d/firewall in function start also.

[Comment 3 crontraconstantium 2004-07-10 11:30:00 UTC]

There are a few options in init.d/firewall that aren't in conf.d/firewall. They should be added and have commented explanations.

[Comment 4 Daniel Ahlberg (RETIRED) 2004-07-14 13:54:59 UTC]

Is this meant to be just a script (maybe part of baselayout?) or a package?

[Comment 5 SpanKY 2004-10-09 22:45:04 UTC]

best integrated with iptables i think

[Comment 6 Caleb Tennis (RETIRED) 2005-07-21 13:09:56 UTC]

see above comments.