pmfirewall - ipchains firewall configuration utility
SYNOPSIS
pmfirewall [ command ]
DESCRIPTION
PMFirewall is an Ipchains Firewall and Masquerading Con-
figuration Utility for Linux. It was designed to allow a
beginner to build a custom firewall with little or no
ipchains experience. This firewall should work for most
Workstations, Servers and Dual NIC routers using either a
dialup, DSL, Cable or LAN setup. It is restrictive to out-
side attacks while still being transparent to those
inside.
FEATURES
Autodetection of the IP Address and Netmask of each inter-
face.
Blocking of NetBIOS, NetBUS, Back Orifice, Samba and other
attacks.
Protection against IP Spoofing Attacks.
Logging of DENY packets.
Manipulation of TOS bits of the packet for optomizing
transfers. You must have CONFIG_IP_ROUTE_TOS enabled in
your kernel for this to be effective.
Masquerading support is decided during install.
COMMANDS
One option must be specified on the command line.
start
Enables PMFirewall and Masquerading (if installed).
stop
Disables PMFirewall and Masquerading (if
installed).
restart
Flushes and reloads the rules in PMFirewall.
masqstart
Enables IP Masquerading only (no firewall).
Disables IP Masquerading only (no firewall).
uninstall
Completely removes PMFirewall.
help
Displays a list of all possible command line
options.
FILES
All files related to PMFirewall are located in
/usr/local/pmfirewall unless another location was chosen
during the install.
pmfirewall
Main control script.
pmfirewall.conf
Holds local interface and system configuration.
pmfirewall.rules.1
Standard rule file which should not be edited.
pmfirewall.rules.local
Local rules file where the installer writes custom
rules chosen at install time. Any custom rules
should be added here.
pmfirewall.rules.masq
Holds rules specific to IP masquerading.
uninstall
Will completely uninstall PMFirewall.
README.pmfirewall
The PMFirewall README document.
IPCHAINS-HOWTO
Complete ipchains HOWTO text document.
BUGS
None are known at this time.
SUPPORT
The mailing list will be used for updates, announcements,
support and general discussions of the project. To sub-
scribe to the pmfirewall mailing list send a message to:
majordomo@pointman.org with: subscribe pmfirewall in the
advised. Email sent to the mailing list will receive a
faster response.
FURTHER INFORMATION
For further information, please visit the PMFirewall home-
page: http://www.pointman.org
The latest version can be downloaded via ftp from:
ftp.pointman.org/pub/pmfirewall
SEE ALSO
ipchains (8)
AUTHOR
Rick Johnson <rick@pointman.org>
PMFIREWALL version 1.1.X March 2000