fwctl - Program to configure the Linux kernel firewall.
fwtcl [--aliases file] [ --interfaces file ] [--rules file] [--services-dir dir ]+ [--accounting-file file ] [--copy | --nocopy] [--mark mark] [--log | --nolog] [--default ACCEPT|REJECT|DENY] (start|stop|flush|restart|dump-acct|check|dump-config)
fwctl configure the Linux kernel firewall using the Fwctl module.
Reset and the firewall and configure using the Fwctl module according to the rules of the rules file.
Reset the firewall and allow only loopback IP traffic.
Remove all Chains and Rules
Does the same thing as a start since start already resets the firewall.
Parses the configuration files to see if there are any problems with them.
Dump the byte counters associated to accounting rules in the accounting log file. The counters are reset to zero by this operation.
Note that the accounting rules are dumped before the firewall is reset, so there is no need to use this command before a start or stop.
Intended for debugging. The configuration files are parsed and the configuration object is printed on STDOUT using Data::Dumper.
Specifies the path to the aliases file. Default is /etc/fwctl/aliases.
Specifies the path to the interfaces file. Default is /etc/fwctl/interfaces
Specifies the path to the rules file. Default is /etc/fwctl/rules
Sets the search patch for service modules. The default is to look in PERLPATH and /etc/fwctl/services/. Using this option removes the last directory from the search path and adds the directory specified as option. Note that the default perl module path are always searched.
This option may be specified multiple times.
Specifies the path to the accounting file. Default is /var/log/fwctl_acct.
Determines the default logging policy for the firewall. The default is to log all packets which don't match explicitely any rules.
Determines the default copy policy for the firewall. The default is to mark for copy to user space all packets which don't match explicitely any rules.
If this option is set, all packets which don't match explicitely one rule, will be marked with the specified mark.
This sets the default policy for unknown packets. Default is DENY, can be one of ACCEPT, REJECT or DENY.
Francis J. Lacoste <francis.lacoste@iNsu.COM>
Copyright (c) 1999, 2000 iNsu Innovations Inc. All rights reserved.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
Fwctl(3) Fwctl::RuleSet(3).
To install Fwctl, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Fwctl
CPAN shell
perl -MCPAN -e shell install Fwctl
For more information on module installation, please visit the detailed CPAN module installation guide.