Any FERM Users

Any FERM Users

[Luke Davis]

I am looking for a firewall scripting language, or structure system, for
iptables configurations.

I have found some X solutions, but I'm looking for something textmode.

The most promising of these I have found, are no longer supported, or have
not been recently updated.

I did, however, come across FERM (Debian: apt-get install ferm).

Has anyone used this, and/or what are the thoughts of anyone who has any,
respecting this system?

Thanks,

Regards,

Luke

Re: Any FERM Users

[Dj Statik]

I've been using it locally for a little while, it's fairly complex, but not
half as painful as tring to script the firewall rules yourself.

If you want something really simple though you might want to check out
freshmeat for phptables or similar, i.e. a nice little web GUI where you can
tick a couple of boxes and have it spit out a iptables script for you, but
it can't do anything overly complicated.

If you want to script a nice secure and functional firewall though FERM is a
great way to go about it.

It's docs are pretty useful too.

>From Mitchell


----- Original Message ----- 
From: "Luke Davis" <ldavis@shellworld.net>
To: <Speakup@braille.uwo.ca>
Sent: Wednesday, November 05, 2003 6:58 PM
Subject: Any FERM Users


> I am looking for a firewall scripting language, or structure system, for
> iptables configurations.
>
> I have found some X solutions, but I'm looking for something textmode.
>
> The most promising of these I have found, are no longer supported, or have
> not been recently updated.
>
> I did, however, come across FERM (Debian: apt-get install ferm).
>
> Has anyone used this, and/or what are the thoughts of anyone who has any,
> respecting this system?
>
> Thanks,
>
> Regards,
>
> Luke
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Any FERM Users

[Thomas Stivers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/05/03  1:58 AM -0600, Luke Davis wrote:
> I am looking for a firewall scripting language, or structure system, for
> iptables configurations.

I haven't been doing too much overly complicated with it, but I like
shorewall which is also available in debian.

- -- 
Unix is a user friendly operating system. It just picks its friends more
carefully than others.
Thomas Stivers	e-mail: stivers_t@tomass.dyndns.org	gpg: 45CBBABD
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qQGh5JK61UXLur0RAvdDAJ4g/tq3tWi+GH+5W3nWoxjFDFQZlQCfd0uC
SzSYC6smsEK1/SXX/VY3FIM=
=307S
-----END PGP SIGNATURE-----

Re: Any FERM Users

[Luke Davis]

Okay, thanks (to all who responded so far).  I do need to go complex for
this, so FERM or Tom's suggestion, look like potential good ways to go.
Yes, it does look a bit daunting in its interface--they claim a
C-structureed language, but it's just different enough to be
counter-intuitive to me, if looked at from a C/PHP/etc. prospective.
As you say, even that, is better than doing it by hand, as I have done to
date.

Luke

 On
Wed, 5 Nov 2003, Dj Statik wrote:

> I've been using it locally for a little while, it's fairly complex, but not
> half as painful as tring to script the firewall rules yourself.
>
> If you want something really simple though you might want to check out
> freshmeat for phptables or similar, i.e. a nice little web GUI where you can
> tick a couple of boxes and have it spit out a iptables script for you, but
> it can't do anything overly complicated.
>
> If you want to script a nice secure and functional firewall though FERM is a
> great way to go about it.
>
> It's docs are pretty useful too.
>
> >From Mitchell
>
>
> ----- Original Message -----
> From: "Luke Davis" <ldavis@shellworld.net>
> To: <Speakup@braille.uwo.ca>
> Sent: Wednesday, November 05, 2003 6:58 PM
> Subject: Any FERM Users
>
>
> > I am looking for a firewall scripting language, or structure system, for
> > iptables configurations.
> >
> > I have found some X solutions, but I'm looking for something textmode.
> >
> > The most promising of these I have found, are no longer supported, or have
> > not been recently updated.
> >
> > I did, however, come across FERM (Debian: apt-get install ferm).
> >
> > Has anyone used this, and/or what are the thoughts of anyone who has any,
> > respecting this system?
> >
> > Thanks,
> >
> > Regards,
> >
> > Luke
> >
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

Re: Any FERM Users

[Alex Snow]

webmin also has a good iptables module.
On Wed, Nov 05, 2003 at 
08:26:05PM +1100, Dj Statik wrote:
> I've been using it locally for a little while, it's fairly complex, but not
> half as painful as tring to script the firewall rules yourself.
> 
> If you want something really simple though you might want to check out
> freshmeat for phptables or similar, i.e. a nice little web GUI where you can
> tick a couple of boxes and have it spit out a iptables script for you, but
> it can't do anything overly complicated.
> 
> If you want to script a nice secure and functional firewall though FERM is a
> great way to go about it.
> 
> It's docs are pretty useful too.
> 
> >From Mitchell
> 
> 
> ----- Original Message ----- 
> From: "Luke Davis" <ldavis@shellworld.net>
> To: <Speakup@braille.uwo.ca>
> Sent: Wednesday, November 05, 2003 6:58 PM
> Subject: Any FERM Users
> 
> 
> > I am looking for a firewall scripting language, or structure system, for
> > iptables configurations.
> >
> > I have found some X solutions, but I'm looking for something textmode.
> >
> > The most promising of these I have found, are no longer supported, or have
> > not been recently updated.
> >
> > I did, however, come across FERM (Debian: apt-get install ferm).
> >
> > Has anyone used this, and/or what are the thoughts of anyone who has any,
> > respecting this system?
> >
> > Thanks,
> >
> > Regards,
> >
> > Luke
> >
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

-- 
Who is General Failure and why is he reading my hard disk?

Re: Any FERM Users

[Scott Howell]

Luke,

gShield is another option. I can't recall where you can get this, but I 
know if you go to freshmeet.net and do a search you will find it. I've 
been using it and it works just fine for me and is totally text-based.

Scott