To manage firewall rules we devised special commands with an easy syntax. The main goal was to abbreviate the length of the mostly used iptables commands and to simplify the syntax of them. For example, the following iptables command
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPTcould be reduced to:
accept input proto tcp dport 22
All flex-fw commands are regular ash/dash functions. All functions can split to the following groups:
All filtering functions have simular syntax like that:
FUNCTION [ table TABLE ] [ action ACTION ] CHAIN [ FILTER ]Where TABLE and CHAIN define the iptables table and chain names, FILTER defines extra conditions, and FUNCTION may be the following:
The address translation functions are required to manage rules related to
nat table of iptables.
The control functions can change the behaviour of flex-fw and manage the services.
Copyright (C) 2014 Vitaly Druzhinin