FireHOLのソースを表示

[[Category:ファイアウォール]]
[[en:FireHOL]]
[https://firehol.org FireHOL] は、理解しやすく人間が読める設定ファイルから安全でステートフルなファイアウォールを構築するための言語 (およびそれを実行するプログラム) です。設定は、非常に複雑なセットアップでも読みやすくなっています。バックグラウンドで [[iptables]] (IPv4/IPv6) とインターフェイスします。

== インストール ==

{{Aur|firehol}} を [[インストール]]  または {{Aur|firehol-git}}

== Configuration ==

=== Initial Auto Configuration ===

Firehol comes with its own firewall wizard. All traffic is allowed by default. Using the wizard is the first step to get a basic firewall configuration which automatically detects all open port and interfaces running on the system. 

 # firehol wizard > /tmp/firehol.conf

The configuration is well documented. After finishing editing move it to {{ic|/etc/firehol/firehol.conf}}. Then test run it with the command 

 # firehol try

You have 30 seconds before those changes are undone and if everything works as expected, you can make it permanent by [[starting]] and [[enabling]] {{ic|firehol.service}}

{{Expansion|stub}}

A good way to start learning its scripting declarations is by copying an [https://firehol.org/#firehol Firehol example configuration].

The configuration file is bash file and has 3 parts:

* helper
* interface
* router

== Try, Run and Enable ==

You can test the configuration file's correctness by issuing:

 # firehol try

or

 # firehol nofast try

If the configuration is working, [[start/enable]] the {{ic|firehol.service}}.

{{Tip|
* The package also includes [https://firehol.org/#fireqos FireQOS], a helper for [[Advanced traffic control]]. It is packaged with its own {{ic|fireqos.service}}. 
* The {{Pkg|netdata}} (or {{Aur|netdata-git}}) application for traffic monitoring, created by the same project authors, also is available. See [https://github.com/firehol/netdata Netdata] for more information.
}}