Firehol

From Smop.co.uk

Jump to: navigation, search

Firehol is my current preferred firewall tool. The rules it generates cold possibly be more optimised, however it has a very readable, very flexible text configuration file (I find GUIs get in the way).

  • edit /etc/default/firehol
    • START_FILEHOL=YES
  • add extra /etc/firehol/services/service.conf files. e.g. rtsp.conf: 
#FHVER: 1:213
server_rtsp_ports="tcp/554 udp/554"
client_rtsp_ports="default"
  • create /etc/firehol/firehol.conf
  • to test any changes "firehol try"
    • type "commit" within 30 seconds of the prompt for the changes to be kept
Retrieved from "http://www.smop.co.uk/mediawiki/index.php/Firehol"
Personal tools