Linux.com

Set up your firewall with Firewall Builder

Posted by: Anonymous [ip: 204.153.155.151] on August 14, 2008 04:52 PM
"Finally, when you install a firewall from fwbuilder, you are prompted for the user name and server to connect to for installation, and a connection is then made over SSH to that machine to install the firewall policy. It would also be nice to be able to simply export the iptables file for manual installation."

If you "compile" the firewall without installing it, it creates the necessary shell script to do EXACTLY that. It even says how to do it in the instruction documents.

As someone who has been using Firewall Builder from the early days and wrote a white paper/book on building Linux based firewalls centered around Firewall Builder as the firewall rule management interface, I personally think that it is one of the best ones out there. Firewall Builder is fantastic for managing multiple firewalls or firewalls that are not local to the machine that you are working on. Such as dedicated firewall "appliances". It's not really intended to be a Zone Alarm replacement" or a "Windows Firewall replacement". More like a cross-platform replacement for true firewall management. One of the reasons that I chose it was due to it being object based like the CheckPoint FW1 interface is. In addition the one interface can be used to manage, at the same time, rule sets for many different port filtering technologies. It works with iptables, ipfw, pf, and PIX/ASA, all from the same GUI, and all at the same time.

GUFW is good if you're working with a local firewall on the machine that you are using to have a "Zone Alarm work-alike" or a "Windows Firewall work-alike".

#

Return to Set up your firewall with Firewall Builder