DOCSLIB.ORG

Fireqos Reference

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Fireqos Reference FireQOS Reference Copyright (c) 2004,2013-2015 Costa Tsaousis costa@firehol.org Copyright (c) 2012-2015 Phil Whineray phil@firehol.org Version 3.0.0-rc.3 (Built 10 Oct 2015) Contents 1 FireQOS Reference4 1.1 Who should read this manual....................4 1.2 Where to get help..........................4 1.3 Installation..............................4 1.4 Licence................................5 2 Running and Configuring FireQOS6 3 Organising Traffic with FireQOS6 4 Optional Parameters for FireQOS Commands6 5 Manual Pages in Alphabetical Order6 5.1 fireqos(1)...............................6 5.1.1 NAME.............................6 5.1.2 SYNOPSIS..........................6 5.1.3 DESCRIPTION.......................7 5.1.4 COMMANDS.........................7 5.1.5 FILES.............................8 5.1.6 SEE ALSO..........................8 5.2 fireqos.conf(5).............................9 5.2.1 NAME.............................9 1 5.2.2 DESCRIPTION.......................9 5.2.3 SPEED UNITS........................9 5.2.4 EXAMPLE.......................... 10 5.2.5 SEE ALSO.......................... 13 5.3 fireqos-class(5)............................ 14 5.3.1 NAME............................. 14 5.3.2 SYNOPSIS.......................... 14 5.3.3 DESCRIPTION....................... 14 5.3.4 PARAMETERS....................... 15 5.3.5 EXAMPLES......................... 16 5.3.6 SEE ALSO.......................... 17 5.4 fireqos-interface(5).......................... 18 5.4.1 NAME............................. 18 5.4.2 SYNOPSIS.......................... 18 5.4.3 DESCRIPTION....................... 18 5.4.4 PARAMETERS....................... 18 5.4.5 EXAMPLES......................... 19 5.4.6 SEE ALSO.......................... 19 5.5 fireqos-match(5)........................... 20 5.5.1 NAME............................. 20 5.5.2 SYNOPSIS.......................... 20 5.5.3 DESCRIPTION....................... 20 5.5.4 PARAMETERS....................... 21 5.5.5 EXAMPLES......................... 21 5.5.6 SEE ALSO.......................... 22 5.6 fireqos-params(5)........................... 23 5.6.1 NAME............................. 23 5.6.2 SYNOPSIS.......................... 23 5.6.3 DESCRIPTION....................... 23 5.6.4 SEE ALSO.......................... 23 5.7 fireqos-params-class(5)........................ 24 2 5.7.1 NAME............................. 24 5.7.2 SYNOPSIS.......................... 24 5.7.3 DESCRIPTION....................... 24 5.7.4 ceil, max........................... 25 5.7.5 SEE ALSO.......................... 30 5.8 fireqos-params-match(5)....................... 31 5.8.1 NAME............................. 31 5.8.2 SYNOPSIS.......................... 31 5.8.3 DESCRIPTION....................... 32 5.8.4 SEE ALSO.......................... 35 3 The latest version of this manual is available online as a PDF, as single page HTML and also as multiple pages within the website. 1 FireQOS Reference 1.1 Who should read this manual This is a reference guide with specific detailed information on commands and configuration syntax for the FireQOS tool. The reference is unlikely to be suitable for newcomers to the tools, except as a means to look up more information on a particular command. For tutorials and guides to using FireHOL and FireQOS, please visit the website. 1.2 Where to get help The FireHOL website. The mailing lists and archives. The package comes with a complete set of manpages, a README and a brief INSTALL guide. 1.3 Installation You can download tar-file releases by visiting the FireHOL website download area. Unpack and change directory with: tar xfz firehol-version.tar.gz cd firehol-version Options for the configure program can be seen in the INSTALL file and by running: ./configure --help To build and install taking the default options: ./configure && make && sudo make install 4 Alternatively, just copy the sbin/fireqos.in file to where you want it. All of the common SysVInit command line arguments are recognised which makes it easy to deploy the script as a startup service. Packages are available for most distributions and you can use your distribution’s standard commands (e.g. aptitude, yum, etc.) to install these. Note Distributions do not always offer the latest version. You can see what the latest release is on the FireHOL website. 1.4 Licence This manual is licensed under the same terms as the FireHOL package, the GNU GPL v2 or later. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABIL- ITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA 5 2 Running and Configuring FireQOS • fireqos(1) - FireQOS program • fireqos.conf(5) - FireQOS configuration file 3 Organising Traffic with FireQOS • fireqos-interface(5) - create an interface definition • fireqos-class(5) - traffic class definition • fireqos-match(5) - QOS traffic match 4 Optional Parameters for FireQOS Commands • fireqos-params-class(5) - optional class parameters • fireqos-params-match(5) - optional match parameters 5 Manual Pages in Alphabetical Order 5.1 fireqos(1) 5.1.1 NAME fireqos - an easy to use but powerful traffic shaping tool 5.1.2 SYNOPSIS fireqos CONFIGFILE [start | debug] [ – conf-arg . ] fireqos { stop | clear_all_qos } fireqos status [name [ dump [class]]] fireqos { dump | tcpdump } name class [ tcpdump-arg ...] fireqos { drops | overlimits | requeues } name 6 5.1.3 DESCRIPTION FireQOS is a program that helps you configure traffic shaping on Linux. Run without any arguments, fireqos will present some help on usage. When given CONFIGFILE, fireqos will use the named file instead of /etc/firehol/fireqos.conf as its configuration. The parameter name always refers to an interface name from the configuration file. The parameter class always refers to a named class within a named interface. It is possible to pass arguments for use by the configuration file separating any conf-arg values from the rest of the arguments with --. The arguments are accessible in the configuration using standard bash(1) syntax e.g. $1, $2, etc. 5.1.4 COMMANDS start; debug Activates traffic shaping on all interfaces, as given in the configu- ration file. When invoked as debug, FireQOS also prints all of the tc(8) commands it executes. stop Removes all traffic shaping applied by FireQOS (it does not touch QoS on other interfaces and IFBs used by other tools). clear_all_qos Removes all traffic shaping on all network interfaces and re- moves all IFB devices from the system, even those applied by other tools. status Shows live utilisation for the specified interface. FireQOS will show you the rate of traffic on all classes, adding one line per second (similarly to vmstat, iostat, etc.) If dump is specified, it tcpdumps the traffic in the given class of the interface. tcpdump; dump FireQOS temporarily mirrors the traffic of any leaf class to an IFB device. Then it runs tcpdump(8) on this interface to dump the traffic to your console. You may add any tcpdump(8) parameters you like to the command line, (to dump the traffic to a file, match a subset of the traffic, etc.), for example this: fireqos tcpdump adsl-in voip -n will start a tcpdump of all traffic on interface adsl-in, in class voip. The parameter -n is a tcpdump(8) parameter. 7 Note When FireQOS is running in tcpdump mode, it locks itself and will refuse to run in parallel with another FireQOS altering the QoS, or tcpdumping other traffic. This is because FireQOS reserves device ifb0 for monitoring. If two FireQOS processes were allowed to tcpdump in parallel, your dumps would be wrong. So it locks itself to prevent such a case. drops Shows packets dropped per second, per class, for the specified interface. overlimits Shows packets delayed per second, per class, for the specified inter- face. requeues Shows packets requeued per second, per class, for the specified inter- face. 5.1.5 FILES /etc/firehol/fireqos.conf 5.1.6 SEE ALSO • fireqos.conf(5) - FireQOS configuration file • FireHOL Website • FireQOS Online PDF Manual • FireQOS Online Documentation • tc(8) - show / manipulate traffic control settings • tcpdump(8) - show / manipulate traffic control settings 8 5.2 fireqos.conf(5) 5.2.1 NAME fireqos.conf - FireQOS configuration file 5.2.2 DESCRIPTION This file defines the traffic shaping that will be applied by fireqos(1). The default configuration file is /etc/firehol/fireqos.conf. It can be over- ridden from the command line. A configuration consists of a number of input and output interface definitions (see fireqos-interface(5)). Each interface can define any number of (optionally nested) classes (see fireqos-class(5)) which shape the traffic which they match (see fireqos-match(5)). 5.2.3 SPEED UNITS In FireQOS, speeds can be expressed in the following units: #bps # bytes per second #kbps;#Kbps # kilobytes per second #mbps;#Mbps # megabytes per second #gbps;#Gbps # gigabytes per second #bit # bits per second #kbit;#Kbit;# # kilobits per second (default) #mbit;#Mbit # megabits per second #gbit;#Gbit # gigabits per second #% In a class, uses this percentage of the enclosing rate. Note The default, kbit is different to tc(8) which assumes bytes per second when no unit is specified.
Load more

Recommended publications
  • Migrazione Da Iptables a Nftables
    UNIVERSITÀ DEGLI STUDI DI GENOVA MASTER IN CYBER SECURITY AND DATA PROTECTION Migrazione da iptables a nftables Autore: Tutor accademico: dott. Marco DE BENEDETTO prof. Mario MARCHESE Tutor aziendale: dott. Carlo BERUTTI BERGOTTO Project Work finale del Master di secondo livello in Cyber Security and Data Protection III edizione (a.a. 2016/17) 10 marzo 2019 iii Indice 1 Introduzione 1 2 Packet Filtering in Linux 3 2.1 Storia ...................................... 3 2.2 Netfilter .................................... 4 2.3 Nftables successore di iptables? ....................... 6 3 Firewall Linux nella rete Galliera 7 3.1 Cenni storici .................................. 7 3.2 Architettura attuale .............................. 7 3.3 Problemi dell’infrastruttura ......................... 9 3.4 Opportunità di migrazione a nftables ................... 9 4 Nftables 11 4.1 Caratteristiche di nftables .......................... 11 4.2 Packet flow in nftables ............................ 12 4.3 Strumenti di debug e tracing ......................... 15 5 Migrazione del Captive Portal 17 5.1 Captive Portal con iptables .......................... 17 5.2 Captive Portal nella versione nftables ................... 19 5.3 Autorizzazioni temporizzate ........................ 20 5.4 Aggiornamento del timeout ......................... 21 5.5 Limitazione della banda ........................... 22 6 Strumenti di sviluppo e test 25 6.1 Virtualizzazione ................................ 25 6.2 Debug ..................................... 26 7 Considerazioni finali
    [Show full text]
  • Pipenightdreams Osgcal-Doc Mumudvb Mpg123-Alsa Tbb
    pipenightdreams osgcal-doc mumudvb mpg123-alsa tbb-examples libgammu4-dbg gcc-4.1-doc snort-rules-default davical cutmp3 libevolution5.0-cil aspell-am python-gobject-doc openoffice.org-l10n-mn libc6-xen xserver-xorg trophy-data t38modem pioneers-console libnb-platform10-java libgtkglext1-ruby libboost-wave1.39-dev drgenius bfbtester libchromexvmcpro1 isdnutils-xtools ubuntuone-client openoffice.org2-math openoffice.org-l10n-lt lsb-cxx-ia32 kdeartwork-emoticons-kde4 wmpuzzle trafshow python-plplot lx-gdb link-monitor-applet libscm-dev liblog-agent-logger-perl libccrtp-doc libclass-throwable-perl kde-i18n-csb jack-jconv hamradio-menus coinor-libvol-doc msx-emulator bitbake nabi language-pack-gnome-zh libpaperg popularity-contest xracer-tools xfont-nexus opendrim-lmp-baseserver libvorbisfile-ruby liblinebreak-doc libgfcui-2.0-0c2a-dbg libblacs-mpi-dev dict-freedict-spa-eng blender-ogrexml aspell-da x11-apps openoffice.org-l10n-lv openoffice.org-l10n-nl pnmtopng libodbcinstq1 libhsqldb-java-doc libmono-addins-gui0.2-cil sg3-utils linux-backports-modules-alsa-2.6.31-19-generic yorick-yeti-gsl python-pymssql plasma-widget-cpuload mcpp gpsim-lcd cl-csv libhtml-clean-perl asterisk-dbg apt-dater-dbg libgnome-mag1-dev language-pack-gnome-yo python-crypto svn-autoreleasedeb sugar-terminal-activity mii-diag maria-doc libplexus-component-api-java-doc libhugs-hgl-bundled libchipcard-libgwenhywfar47-plugins libghc6-random-dev freefem3d ezmlm cakephp-scripts aspell-ar ara-byte not+sparc openoffice.org-l10n-nn linux-backports-modules-karmic-generic-pae
    [Show full text]
  • Server Firewall
    Linux Firewall ad opera d'arte Pagina 1 di 43 Documentazione basata su openskills.info. Linux Firewall ad opera d'arte ( C ) Coresis e autori vari Linux Firewall ad opera d'arte P ROGRAMMA Linux Firewalling Linux firewalling: Introduzione a Iptables Obiettivo: Overview, gestione, utilizzo di iptables su Linux per packet Comprendere Iptables: filtering - La sintassi del comando - La logica di gestione di un pacchetto nel kernel iptables - Linux natting e packet mangling - I campi di applicazione e le soluzioni possibili Approfondimenti su funzionalità sperimentali Utilizzo di iptables per natting, masquerading e mangling di Sistemi di logging e gestione pacchetti. Soluzioni di alta affidabilità Esempi di configurazione di Iptables Esempi di configurazioni di un firewall Linux con iptables Iptables Avanzato Funzionalità avanzate di iptables. Linux Firewalling Linux Firewall ad opera d'arte Pagina 2 di 43 L INUX FIREWALLING: INTRODUZIONE A Overview, gestione, utilizzo di iptables su Linux per I PTABLES packet filtering NetFilter e il firewalling su Linux Il codice di firewalling nel kernel Linux ha una sua storia: Nel kernel 2.0 ( 1996 ) si usava ipfwadm Nel kernel 2.2 ( 1999 ) si sono usate le ipchains Dal kernel 2.4 ( 2001 ) sono state introdotte le iptables Tutt'ora utilizzate nel ramo 2.6 ( 2002 ) Il framework netfilter/iptables gestisce tutte le attività di firewalling su Linux: - Netfilter comprende i moduli del kernel - iptables è il comando con cui si gestisce netfilter Feature principali: - Packet filtering stateless e stateful - Supporto IPv4 e IPv6 - Ogni tipo di natting (NAT/NAPT) - Infrastruttura flessibile ed estendibile - Numerosi plug-in e moduli aggiuntivi per funzionalità aggiuntive Sito ufficiale: http://www.netfilter.org Linux Firewall ad opera d'arte Pagina 3 di 43 Logica di Iptables: tabelle, catene, regole, target Iptables lavora su 3 tabelle (tables) di default: filter - Regola il firewalling: quali pacchetti accettare, quali bloccare nat - Regola le attività di natting mangle - Interviene sulla alterazione dei pacchetti.
    [Show full text]
  • Firehol + Fireqos Reference
    FireHOL + FireQOS Reference FireHOL Team Release 2.0.0-pre7 Built 13 Apr 2014 FireHOL + FireQOS Reference Release 2.0.0-pre7 i Copyright © 2012-2014 Phil Whineray <[email protected]> Copyright © 2004, 2013-2014 Costa Tsaousis <[email protected]> FireHOL + FireQOS Reference Release 2.0.0-pre7 ii Contents 1 Introduction 1 1.1 Latest version........................................1 1.2 Who should read this manual................................1 1.3 Where to get help......................................1 1.4 Manual Organisation....................................1 1.5 Installation.........................................2 1.6 Licence...........................................2 I FireHOL3 2 Configuration 4 2.1 Getting started........................................4 2.2 Language..........................................4 2.2.1 Use of bash.....................................4 2.2.1.1 What to avoid..............................4 3 Security 6 3.1 Important Security Note..................................6 3.2 What happens when FireHOL Runs?............................6 3.3 Where to learn more....................................7 4 Troubleshooting 8 4.1 Reading log output.....................................8 FireHOL + FireQOS Reference Release 2.0.0-pre7 iii II FireQOS 11 5 Configuration 12 III FireHOL Reference 13 6 Running and Configuring 14 6.1 FireHOL program: firehol................................. 15 6.2 FireHOL configuration: firehol.conf............................ 18 6.3 control variables: firehol-variables............................. 23
    [Show full text]
  • Suse Linux Enterprise Server Benchmark V1.0
    CIS SuSE Linux Benchmark SuSE Linux Enterprise Server Benchmark v1.0 (SuSE Linux Enterprise Server 9.0) March, 2006 Copyright 2001-2005, The Center for Internet Security http://www.CISecurity.org/ 1 CIS SuSE Linux Benchmark TERMS OF USE AGREEMENT Background. The Center for Internet Security ("CIS") provides benchmarks, scoring tools, software, data, information, suggestions, ideas, and other services and materials from the CIS website or elsewhere ("Products") as a public service to Internet users worldwide. Recommendations contained in the Products ("Recommendations") result from a consensus-building process that involves many security experts and are generally generic in nature. The Recommendations are intended to provide helpful information to organizations attempting to evaluate or improve the security of their networks, systems, and devices. Proper use of the Recommendations requires careful analysis and adaptation to specific user requirements. The Recommendations are not in any way intended to be a "quick fix" for anyone's information security needs. No Representations, Warranties, or Covenants. CIS makes no representations, warranties, or covenants whatsoever as to (i) the positive or negative effect of the Products or the Recommendations on the operation or the security of any particular network, computer system, network device, software, hardware, or any component of any of the foregoing or (ii) the accuracy, reliability, timeliness, or completeness of the Products or the Recommendations. CIS is providing the Products and the Recommendations "as is" and "as available" without representations, warranties, or covenants of any kind. User Agreements. By using the Products and/or the Recommendations, I and/or my organization ("We") agree and acknowledge that: 1.
    [Show full text]
  • Firewall En GNU/Linux Netfilter/Iptables
    Firewall en GNU/Linux netfilter/iptables SEGURIDAD EN SISTEMAS INFORMATICOS 4o Grado en Ing. Inform´atica http://ccia.ei.uvigo.es/docencia/SSI-grado/ 6 de noviembre de 2012 { FJRP, FMBR 2012 ccia SSI { 1. Introducci´ona netfilter/iptables netfilter (http://www.netfilter.org) es un componente del n´ucleoLinux (desde la versi´on2.4) encargado de la manipulaci´onde paquetes de red, que permite: • filtrado de paquetes • traducci´onde direcciones (NAT) • modificaci´onde paquetes iptables es una herramienta/aplicaci´on (forma parte del proyecto net- filter) que hace uso de la infraestructura que ofrece netfilter para construir y configurar firewalls • permite definir pol´ıticasde filtrado, de NAT y realizar logs • remplaza a herramientas anteriores: ifwadmin, ipchains • puede usar las capacidades de seguimiento de conexiones net- filter para definir firewalls con estado Las posibles tareas a realizar sobre los paquetes (filtrado, NAT, modificaci´on)se controlan mediante distintos conjuntos de reglas, en funci´onde la situaci´on/momentoen la que se encuentre un paquete durante su procesamiento dentro de netfilter. • Las listas de reglas y dem´as datos residen en el espacio de memoria del kernel • La herramienta de nivel de usuario iptables permite al adminis- trador configurar las listas de reglas que usa el kernel para decidir qu´ehacer con los paquetes de red que maneja. • En la pr´actica un ”firewall" iptables consistir´aen un script de shell conteniendo los comandos iptables para configurar convenientemente las listas de reglas. ◦ tipicamente ese script residir´a en el directorio '/etc/init.d' ´o en '/etc/rc.d' para que sea ejecutado cada vez que arranca el sistema • Otras utilidades (guardar/recuperar reglas en memoria): iptables-save, iptable-restore { FJRP, FMBR 2012 ccia SSI { 1 (a) Elementos TABLAS.
    [Show full text]
  • Curso Avanzado De Linux
    Curso avanzado de GNU/Linux Netfilter Rafael Varela Pet Unidad de Sistemas Área de Tecnologías de la Información y Comunicaciones Universidad de Santiago de Compostela Curso avanzado de GNU/Linux Introducción: netfilter, iptables ● netfilter.org – framework para las series 2.4 y 2.6 que permite manipular tráfico de red – sucesor de iptables (kernel 2.2.x) e ipfwadm (kernel 2.0.x) ● componentes – netfilter: puntos de enganche (hooks) en el subsistema de red del kernel – iptables: herramienta para definir conjuntos de reglas de acceso – otros: subsistema NAT, connection tracking. Curso avanzado de GNU/Linux netfilter: funciones ● Filtrado de paquetes con estado (stateful) o sin estado (stateless). ● Network Address and Port Translation (NAT/NAPT) ● Arquitectura extensible ● Sólo funciona con protocolo IP (IPv4 e IPv6) Curso avanzado de GNU/Linux Netfilter: terminología ● Destinos (targets): Acción que se le puede aplicar a un paquete: ACCEPT, DROP, REJECT, LOG, ... ● Reglas (rules): define un criterio de selección de paquetes y qué destino se le va a dar a los que o cumplan. ● Cadenas (chains): conjunto de reglas que se aplican a un paquete. – Cada cadena tiene un ámbito de aplicación específico. – Existen cadenas predefinidas y cadenas de usuario Curso avanzado de GNU/Linux Netfilter: terminología ● Tablas: agrupan cadenas según un determinado propósito. Existen 4 tablas: – filter – nat – mangle – raw ● Cada tabla tiene un conjunto de cadenas predefinidas. La tabla filter tiene las cadenas INPUT, FORWARD, OUTPUT Curso avanzado de GNU/Linux
    [Show full text]
  • Firehol Manual
    FireHOL Manual Firewalling with FireHOL FireHOL Team Release 2.0.0-pre3 Built 28 Oct 2013 FireHOL Manual Release 2.0.0-pre3 i Copyright © 2012, 2013 Phil Whineray <[email protected]> Copyright © 2004, 2013 Costa Tsaousis <[email protected]> FireHOL Manual Release 2.0.0-pre3 ii Contents 1 Introduction 1 1.1 Latest version........................................1 1.2 Who should read this manual................................1 1.3 Where to get help......................................1 2 FireHOL Reference2 2.1 FireHOL program: firehol.................................3 2.2 FireHOL configuration: firehol.conf............................6 2.3 control variables: firehol-variables............................. 11 2.4 interface definition: firehol-interface............................ 18 2.5 router definition: firehol-router............................... 20 2.6 policy command: firehol-policy............................... 23 2.7 protection command: firehol-protection.......................... 24 2.8 server, route commands: firehol-server........................... 27 2.9 client command: firehol-client............................... 29 2.10 group command: firehol-group............................... 31 2.11 version config helper: firehol-version............................ 33 2.12 action config helper: firehol-action............................. 34 2.13 blacklist config helper: firehol-blacklist.......................... 36 2.14 classify config helper: firehol-classify........................... 37 2.15 connmark config helper: firehol-connmark........................
    [Show full text]
  • Neue Türpolitik Nftables
    01/2014 Packet Filtering mit NFtables Know-how Neue Türpolitik NFtables 84 Seit knapp 13 Jahren macht IPtables den Türsteher für Linux und kontrolliert den Fluss der ein- und ausge- henden Netzwerkpakete mit Hilfe der Netfilter-Module. Mit dem anvisierten Einzug von NFtables in den Kernel bahnt sich jedoch eine Wachablösung an, die IPtables womöglich den Job kostet. Martin Loschwitz www.linux-magazin.de NFtables gehört haben. Dieser Artikel fragt darum, was die Software ausmacht und wieso sie besser als IPtables ist. Revolution auf Raten Ein Rückblick auf den Werdegang der diversen Paketfilter unter Linux führt schnell vor Augen, dass jeder neu einge- führte Filter stets das direkte Resultat ei- ner Unzufriedenheit mit der bestehenden Lösung war. Der Paketfilter IPchains bie- tet sich dafür wunderbar als Beispiel an. Sein Vorgänger IPfwadm war im Grunde eine Portierung des IPfw-Werkzeugs aus dem BSD-Universum und verfügte nicht über besonders ausgefeilte Fähigkeiten. © Wattana Tasanart, 123RF.com Tasanart, © Wattana Welche Netzwerkpakete rein und wieder raus durften, ließ sich noch einstellen, Firewalls sind keine Software, sondern Kernel, das die Entwickler seither konti- aber nach diversen fortgeschrittenen Fea- ein umfassendes Konzept – das beteuern nuierlich verbessert und funktional aus- tures suchten Administratoren damals jedenfalls die Konstrukteure von Sicher- gebaut haben. Bis heute bewährt sich vergeblich. heitslösungen immer wieder. Und ein IPtables als alleiniger Standardfilter für Der Einsatz von Konditionen blieb in gewichtiger Bestandteil dieses Konzepts Pakete unter Linux. der Ägide von IPfwadm beispielsweise sind die Paketfilter (Packet Filter): Das Mit der Linux-Version 3.13 könnte sich Wunschdenken – Konstrukte wie „Falls sind Werkzeuge, die es Administratoren jedoch eine Wachablösung anbahnen: ein Paket von der IP 192.168.0.1 kommt, ermöglichen, auf Kernelebene bestimm- Die Maintainer des Paketfilters NFtables springe zur Kette XYZ“ waren daher nicht ten Netzwerkpaketen den Zutritt zum [1] haben offiziell beantragt [2], ihre Lö- umsetzbar.
    [Show full text]
  • Vnetbuild Reference
    VNetBuild Reference Copyright (c) Copyright (c) 2015-2017 Phil Whineray phil@firehol.org 2015-2017 Costa Tsaousis costa@firehol.org Version 3.1.7 (Built 31 Dec 2020) Contents 1 VNetBuild Reference 2 1.1 Who should read this manual . 2 1.2 Where to get help . 2 1.3 Installation . 2 1.4 Licence . 3 2 Running and Configuring VNetBuild 4 3 Manual Pages in Alphabetical Order 4 3.1 vnetbuild(1) . 4 3.1.1 NAME . 4 3.1.2 SYNOPSIS . 4 3.1.3 DESCRIPTION . 4 3.1.4 COMMANDS . 4 3.1.5 RUNNING COMMANDS IN A NAMESPACE . 5 3.1.6 SEE ALSO . 6 3.2 vnetbuild.conf(5) . 7 3.2.1 NAME . 7 3.2.2 SYNOPSIS . 7 3.2.3 DESCRIPTION . 7 3.2.4 NAMESPACE DEFINITIONS . 8 3.2.5 CONFIGURATION STATEMENTS . 8 3.2.6 COMMON CUSTOM COMMANDS . 10 3.2.7 EXAMPLE . 11 3.2.8 LIMITATIONS . 12 3.2.9 SEE ALSO . 12 1 The latest version of this manual is available online as a PDF, as single page HTML and also as multiple pages within the website. 1 VNetBuild Reference 1.1 Who should read this manual This is a reference guide with specific detailed information on commands and configuration syntax for the VNetBuild tool. The reference is unlikely to be suitable for newcomers to the tools, except as a means to look up more information on a particular command. For tutorials and guides to using FireHOL and VNetBuild, please visit the website. 1.2 Where to get help The FireHOL website.
    [Show full text]
  • Firehol Online PDF Manual
    FireHOL Reference Copyright (c) 2002-2017 Costa Tsaousis costa@firehol.org Copyright (c) 2012-2017 Phil Whineray phil@firehol.org Version 3.1.7 (Built 31 Dec 2020) Contents 1 FireHOL Reference 7 1.1 Who should read this manual . 7 1.2 Where to get help . 7 1.3 Installation . 7 1.4 Licence . 8 2 Setting up and running FireHOL 9 3 Primary commands 9 4 Sub-commands 9 5 Helper commands 10 6 Manual Pages in Alphabetical Order 12 6.1 firehol(1) . 12 6.1.1 NAME . 12 6.1.2 SYNOPSIS . 12 6.1.3 DESCRIPTION . 12 6.1.4 COMMANDS . 13 6.1.5 FILES . 14 6.1.6 SEE ALSO . 14 6.2 firehol.conf(5) . 16 6.2.1 NAME . 16 6.2.2 DESCRIPTION . 16 6.2.3 VARIABLES AVAILABLE . 17 6.2.4 ADDING SERVICES . 18 6.2.5 DEFINITIONS . 19 6.2.6 SUBCOMMANDS . 20 6.2.7 HELPER COMMANDS . 20 6.2.8 CONFIGURATION HELPER COMMANDS . 20 1 6.2.9 SEE ALSO . 21 6.3 firehol-action(5) . 22 6.3.1 NAME . 22 6.3.2 SYNOPSIS . 22 6.3.3 DESCRIPTION . 22 6.3.4 SEE ALSO . 26 6.4 firehol-actions(5) . 27 6.4.1 NAME . 27 6.4.2 SYNOPSIS . 27 6.4.3 DESCRIPTION . 27 6.4.4 REJECT WITH MESSAGES . 33 6.4.5 SEE ALSO . 34 6.5 firehol-blacklist(5) . 36 6.5.1 NAME . 36 6.5.2 SYNOPSIS . 36 6.5.3 DESCRIPTION . 36 6.5.4 EXAMPLES .
    [Show full text]
  • Advices for Linux on PC
    Advices for Linux on PC Software Documentation Version 1.1 (2016-09-15) © F&S Elektronik Systeme GmbH Untere Waldplätze 23 D-70569 Stuttgart Germany Phone: +49(0)711-123722-0 Fax: +49(0)711-123722-99 About This Document This document gives some advices and hints of how to install and configure the Linux distri- bution on your PC when working with F&S boards and modules under Linux. As this con- cerns the PC, it is valid for all types of boards, no matter if it is NetDCU, PicoMOD, Pico- COM, efus, armStone, QBliss or any other board type by F&S. Remark The version number on the title page of this document is the version of the document. It is not related to any Linux software release version. The latest version of this document can al- ways be found at http://www.fs-net.de. How To Print This Document This document is designed to be printed double-sided (front and back) on A4 paper. If you want to read it with a PDF reader program, you should use a two-page layout where the title page is an extra single page. The settings are correct if the page numbers are at the outside of the pages, even pages on the left and odd pages on the right side. If it is reversed, then the title page is handled wrongly and is part of the first double-page instead of a single page. Titlepage 8 9 Typographical Conventions We use different fonts and highlighting to emphasize the context of special terms: File names Menu entries Board input/output Program code PC input/output Listings Variables Advices for Linux on PC iii iv Advices for Linux on PC History Date V
    [Show full text]