iptfw (Linux iptables Firewall)

iptfw image
Iptfw is a Linux iptables Firewall written in lua.

now supporting a fwproxy-firewall(a firewall and proxy machine).

Features)
  1:controlling access depending on a security level in a user.
  2:detail logging.
  3:switching a external eth_device of NetworkManager_panel on and off,
	  ==> switching firewall ON and OFF.

Programs)
	1:iptfw          init.d/start script 
	2:iptfw2         iptables firewall.
	3:21-iptfw.lua   NetworkManager script
	4:iptfwd.lua     iptfwd maemon
	5:integrity.lua  iptables integrity
	6:iptctl.lua     sending commands for integrity-checker.   
	7:build.lua      creating iptfw2-firewall
	8:install.lua    installing script
	9:ethtool.sh     (optional:ethtool,ip link set)

Requirement)
	A:Lua (version 5.2.x) 
	B:Penlight (Lua Library) 
	C:lfs (Lua Library luafilesyste)
	D:luaposix (Lua Library)
	E:luasocket (Lua Library Network)
	F:luasec for sslmail (Lua Library OpenSSL)
iptfw_flow image
Install)
	tar xvf iptfw-0.96.tar.gz
	cd iptfw-0.96
	
	edit conf/fwproxy.conf
	     conf/fwproxy/*.conf

	build.lua fwproxy
	sudo ./install.lua [inst | uninst]
	
	before reboot)
		sudo sysctl /etc/sysctl.d/iptfw_sysctl.conf
		sudo /etc/init.d/iptfw start

Config)
	1:fwproxy.conf
	2:fwproxy/usr_base.conf
	3:fwproxy/usr_proxy.conf 
	4:fwproxy/log_level.conf     logging  
	5:fwproxy/usr_level.conf     user level
	6:fwproxy/usr_mac.conf
	7:fwproxy/usr_limit.conf     limitation
	8:fwproxy/integrity.conf     iptables integrity
	9:fwproxy/iptfw_sysctl.conf  sysctl (ephemeral-ports,etc)
    optional
	10:fwproxy/log_tarpit.conf  (requirement: xtables-addons module)
	11:fwproxy/optional.conf
Optional)
	edit conf/fwproxy/optional.conf	
	  creating ethtool.sh	
	support)
	 NFQUEUE
	 ulogd
	 ethtool
	 ip link set

Download 

License)
	GPL version 3
Author)
	H.Nakano
Release)
   	2014.05.31 version 0.97 A bug fixed
   	2014.04.24 version 0.96 removed  require("strict")
	2013.11.12 version 0.95 Lua version
	2012.07.10 version 0.8  Erlang version  

to Top
Index Page

Last modified: 2014.05.31; First release: 2012-07-10