Three convenient open-source firewall generators in Linux

Source: Internet
Author: User
Article Title: Understand the three convenient open source firewall generators in Linux. Linux is a technology channel of the IT lab in China. Including desktop applications, Linux system management, kernel research, embedded systems, open source, and other basic categories for all Linux systems and network administrators, one of the most basic tips is to know how to write a strong iptables firewall from the beginning, and how to modify it to adapt to different situations. However, in the real world, this seems to be rare. Learning iptables is not a simple process, but I recommend the following information on the Internet to you, so that you can use it easily.
I believe that all administrators should thoroughly understand Iptables. However, another alternative method is to use an excellent Linux Firewall generation tool.
   Firewall Builder
The first appearance was Firewall Builder, a comprehensive multi-platform graphical Firewall configuration and management tool. It runs on iptables, ipfilter, OpenBSD PF, and Cisco's PIX. Through design, it hides the details of Rule Design, and focuses on writing policies. However, do not run the firewall generator on your real firewall because it requires X Windows. You need to run it on a workstation and then copy the script to the firewall.
The second is Firestarter, which is an excellent graphical firewall generation wizard that can guide you step by step through the firewall building process. This is a good option for a NAT firewall that shares a unique public IP address with a LAN. After the firewall, it also has some public services or a separated DMZ. it has some simple commands to enable or disable the firewall, allowing you to view the status view and current activity. You can run it on a headless computer and remotely monitor it, or use it as an independent firewall.

Third, Shorewall is a popular firewall generator. It is more complex and flexible than Firestarter and is suitable for more complex networks. The learning curve of Shorewall is similar to iptables. However, it provides a wide range of documents and provides guidance on solutions to different situations, such as a single host firewall, two interfaces and three interface firewalls, and firewalls with multiple public IP addresses. You can get a lot of help on filtering P2P services, such as Kazaa speed limit, QqS (Quality Service), VPN transfer and conversion.
We recommend these three software to you so that you don't have to pay for commercial firewall software. The latter, in any case, is inferior to built-in Linux and Unix package filters. Users should spend limited funds on purchasing higher quality hardware.
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.