FireHOL Reference Copyright (c) 2002-2017 Costa Tsaousis costa@firehol.org Copyright (c) 2012-2017 Phil Whineray phil@firehol.org Version 3.1.7 (Built 31 Dec 2020) Contents 1 FireHOL Reference 7 1.1 Who should read this manual . 7 1.2 Where to get help . 7 1.3 Installation . 7 1.4 Licence . 8 2 Setting up and running FireHOL 9 3 Primary commands 9 4 Sub-commands 9 5 Helper commands 10 6 Manual Pages in Alphabetical Order 12 6.1 firehol(1) . 12 6.1.1 NAME . 12 6.1.2 SYNOPSIS . 12 6.1.3 DESCRIPTION . 12 6.1.4 COMMANDS . 13 6.1.5 FILES . 14 6.1.6 SEE ALSO . 14 6.2 firehol.conf(5) . 16 6.2.1 NAME . 16 6.2.2 DESCRIPTION . 16 6.2.3 VARIABLES AVAILABLE . 17 6.2.4 ADDING SERVICES . 18 6.2.5 DEFINITIONS . 19 6.2.6 SUBCOMMANDS . 20 6.2.7 HELPER COMMANDS . 20 6.2.8 CONFIGURATION HELPER COMMANDS . 20 1 6.2.9 SEE ALSO . 21 6.3 firehol-action(5) . 22 6.3.1 NAME . 22 6.3.2 SYNOPSIS . 22 6.3.3 DESCRIPTION . 22 6.3.4 SEE ALSO . 26 6.4 firehol-actions(5) . 27 6.4.1 NAME . 27 6.4.2 SYNOPSIS . 27 6.4.3 DESCRIPTION . 27 6.4.4 REJECT WITH MESSAGES . 33 6.4.5 SEE ALSO . 34 6.5 firehol-blacklist(5) . 36 6.5.1 NAME . 36 6.5.2 SYNOPSIS . 36 6.5.3 DESCRIPTION . 36 6.5.4 EXAMPLES . 37 6.5.5 SEE ALSO . 37 6.6 firehol-classify(5) . 38 6.6.1 NAME . 38 6.6.2 SYNOPSIS . 38 6.6.3 DESCRIPTION . 38 6.6.4 EXAMPLES . 38 6.6.5 SEE ALSO . 38 6.7 firehol-client(5) . 40 6.7.1 NAME . 40 6.7.2 SYNOPSIS . 40 6.7.3 DESCRIPTION . 40 6.7.4 EXAMPLES . 41 6.7.5 SEE ALSO . 41 6.8 firehol-connmark(5) . 42 6.8.1 NAME . 42 6.8.2 SYNOPSIS . 42 6.8.3 DESCRIPTION . 42 6.8.4 EXAMPLES . 43 6.8.5 SEE ALSO . 43 6.9 firehol-defaults.conf(5) . 44 6.9.1 NAME . 44 6.9.2 SYNOPSIS . 44 6.9.3 DESCRIPTION . 44 6.9.4 VARIABLES . 45 6.9.5 SEE ALSO . 50 6.10 firehol-dscp(5) . 52 6.10.1 NAME . 52 6.10.2 SYNOPSIS . 52 6.10.3 DESCRIPTION . 52 2 6.10.4 EXAMPLES . 52 6.10.5 SEE ALSO . 53 6.11 firehol-group(5) . 54 6.11.1 NAME . 54 6.11.2 SYNOPSIS . 54 6.11.3 DESCRIPTION . 54 6.11.4 EXAMPLES . 54 6.11.5 SEE ALSO . 55 6.12 firehol-interface(5) . 56 6.12.1 NAME . 56 6.12.2 SYNOPSIS . 56 6.12.3 DESCRIPTION . 56 6.12.4 PARAMETERS . 57 6.12.5 SEE ALSO . 57 6.13 firehol-ipset(5) . 59 6.13.1 NAME . 59 6.13.2 SYNOPSIS . 59 6.13.3 DESCRIPTION . 59 6.13.4 FireHOL ipset extensions . 59 6.13.5 EXAMPLES . 60 6.13.6 SEE ALSO . 60 6.14 firehol-iptables(5) . 62 6.14.1 NAME . 62 6.14.2 SYNOPSIS . 62 6.14.3 DESCRIPTION . 62 6.14.4 EXAMPLES . 62 6.14.5 SEE ALSO . 63 6.15 firehol-iptrap(5) . 64 6.15.1 NAME . 64 6.15.2 SYNOPSIS . 64 6.15.3 DESCRIPTION . 64 6.15.4 EXAMPLES . 65 6.15.5 SEE ALSO . 66 6.16 firehol-mac(5) . 67 6.16.1 NAME . 67 6.16.2 SYNOPSIS . 67 6.16.3 DESCRIPTION . 67 6.16.4 EXAMPLES . 67 6.16.5 SEE ALSO . 68 6.17 firehol-mark(5) . 69 6.17.1 NAME . 69 6.17.2 SYNOPSIS . 69 6.17.3 DESCRIPTION . 69 6.17.4 EXAMPLES . 70 6.17.5 SEE ALSO . 70 6.18 firehol-masquerade(5) . 71 3 6.18.1 NAME . 71 6.18.2 SYNOPSIS . 71 6.18.3 DESCRIPTION . 71 6.18.4 MASQUERADING AND SNAT . 72 6.18.5 EXAMPLES . 72 6.18.6 SEE ALSO . 72 6.19 firehol-modifiers(5) . 73 6.19.1 NAME . 73 6.19.2 SYNOPSIS . 73 6.19.3 DESCRIPTION . 73 6.19.4 SEE ALSO . 74 6.20 firehol-nat(5) . ..