Firewall Builder 5 User's Guide Firewall Builder 5 User's Guide $Id$ Copyright © 2003-2011 NetCitadel, LLC The information in this manual is subject to change without notice and should not be construed as a commitment by NetCitadel LLC. NetCitadel LLC assumes no responsibility or liability for any errors or inaccuracies that may appear in this manual. 1. Introduction ................................................................................................................... 1 1.1. Introducing Firewall Builder ................................................................................... 1 1.2. Overview of Firewall Builder Features ..................................................................... 1 2. Installing Firewall Builder ................................................................................................ 4 2.1. RPM-Based Distributions (Red Hat, Fedora, OpenSUSE, and Others) ............................. 4 2.2. Ubuntu Installation ............................................................................................... 4 2.3. Installing FreeBSD and OpenBSD Ports ................................................................... 5 2.4. Windows Installation ............................................................................................ 5 2.5. Mac OS X Installation .......................................................................................... 5 2.6. Compiling from Source ......................................................................................... 5 3. Definitions and Terms ..................................................................................................... 7 4. Firewall Builder GUI ....................................................................................................... 8 4.1. The Main Window ............................................................................................... 8 4.2. GUI Menu and Tool Bars .................................................................................... 11 4.2.1. File Menu ............................................................................................... 11 4.2.2. Edit Menu ............................................................................................... 12 4.2.3. View Menu ............................................................................................. 12 4.2.4. Object Menu ........................................................................................... 12 4.2.5. Rules Menu ............................................................................................. 13 4.2.6. Tools Menu ............................................................................................. 13 4.2.7. Window Menu ......................................................................................... 14 4.2.8. Help Menu .............................................................................................. 14 4.2.9. Object Context Menu ................................................................................ 14 4.2.10. Tool Bar ............................................................................................... 15 4.3. Object Tree ....................................................................................................... 16 4.3.1. Using Subfolders to Organize Object Tree .................................................... 19 4.3.2. Filtering the Object Tree ............................................................................ 21 4.3.3. Object Attributes in the Tree ...................................................................... 23 4.3.4. Creating Objects ...................................................................................... 23 4.4. Undo and Redo .................................................................................................. 24 4.4.1. Undo Stack ............................................................................................. 25 4.5. Preferences Dialog .............................................................................................. 27 4.6. Working with Multiple Data Files .......................................................................... 33 5. Working with Objects .................................................................................................... 38 5.1. Types of Objects ................................................................................................ 38 5.2. Addressable Objects ............................................................................................ 38 5.2.1. Common Properties of Addressable Objects .................................................. 38 5.2.2. The Firewall Object .................................................................................. 38 5.2.3. The Cluster Object ................................................................................... 51 5.2.4. Editing Rule Set Objects ............................................................................ 56 5.2.5. Interface Object ....................................................................................... 58 5.2.6. IPv4 Address Object ................................................................................. 67 5.2.7. IPv6 Address Object ................................................................................. 69 5.2.8. Attached Network Objects ......................................................................... 71 5.2.9. Physical Address Objects ........................................................................... 73 5.2.10. Host Object ........................................................................................... 76 5.2.11. IPv4 Network Object ............................................................................... 82 5.2.12. IPv6 Network Object ............................................................................... 83 5.2.13. Address Range Object ............................................................................. 84 5.2.14. Address Tables Object ............................................................................. 86 5.2.15. Special-Case addresses ............................................................................ 95 5.2.16. DNS Name Objects ................................................................................. 97 5.2.17. Object Groups ........................................................................................ 99 5.2.18. Dynamic Object Groups ......................................................................... 100 iii Firewall Builder 5 User's Guide 5.3. Service Objects ................................................................................................. 102 5.3.1. IP Service ............................................................................................. 102 5.3.2. ICMP and ICMP6 Service Objects ............................................................. 107 5.3.3. TCP Service .......................................................................................... 109 5.3.4. UDP Service .......................................................................................... 116 5.3.5. User Service .......................................................................................... 118 5.3.6. Custom Service ...................................................................................... 120 5.4. Time Interval Objects ........................................................................................ 123 5.5. Object Keywords .............................................................................................. 125 5.6. Creating and Using a User-Defined Library of Objects ............................................. 128 5.7. Finding and Replacing Objects ............................................................................ 131 6. Network Discovery: A Quick Way to Create Objects ......................................................... 135 6.1. Reading the /etc/hosts file ................................................................................... 136 6.2. Network Discovery ............................................................................................ 141 6.3. Importing Existing Firewall Configurations into Firewall Builder ............................... 157 6.3.1. Importing Existing Firewall Configurations ................................................. 158 6.3.2. iptables Import Example .......................................................................... 161 6.3.3. Information Regarding PF Import .............................................................. 168 7. Firewall Policies .......................................................................................................... 169 7.1. Policies and Rules ............................................................................................. 169 7.2. Firewall Access Policy Rule Sets ......................................................................... 169 7.2.1. Source and Destination ............................................................................ 170 7.2.2. Service ................................................................................................. 171 7.2.3. Interface ................................................................................................ 171 7.2.4. Direction ............................................................................................... 171 7.2.5. Action .................................................................................................