This is a discussion on iptables frontends? within the Linux Security forums, part of the System Security and Security Related category; Does anyone know of an iptables frontend that is able to import existing rules? I want to play around doing ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Does anyone know of an iptables frontend that is able to import existing
rules? I want to play around doing things in gui, but don't want to redo my rather extensive firewall script again. Cheers -- Jafar Calley Producer - http://moonlife-records.com -------------------------------------- See the latest Mars and Saturn images http://fatcat.homelinux.org |
|
|||
|
On 2005-08-24, jafar <nooo@nospam.com> wrote:
> Does anyone know of an iptables frontend that is able to import existing > rules? I want to play around doing things in gui, but don't want to redo > my rather extensive firewall script again. Can't you just copy your existing firewall script as a backup? If you don't like your changes, copy the script back. --keith -- kkeller-usenet@wombat.san-francisco.ca.us (try just my userid to email me) AOLSFAQ=http://wombat.san-francisco.ca.us/cgi-bin/fom see X- headers for PGP signature information |
|
|||
|
"Keith Keller" <kkeller-usenet@wombat.san-francisco.ca.us> wrote in message
news:ajout2xkul.ln2@goaway.wombat.san-francisco.ca.us... > > Does anyone know of an iptables frontend that is able to import existing > > rules? I want to play around doing things in gui, but don't want to redo > > my rather extensive firewall script again. > > Can't you just copy your existing firewall script as a backup? If you > don't like your changes, copy the script back. "Why do something reasonable when you can go to a lot of trouble?" |
|
|||
|
On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote:
> On 2005-08-24, jafar <nooo@nospam.com> wrote: >> Does anyone know of an iptables frontend that is able to import existing >> rules? I want to play around doing things in gui, but don't want to redo >> my rather extensive firewall script again. > > Can't you just copy your existing firewall script as a backup? If you > don't like your changes, copy the script back. I could, but would rather have the frontend read in my existing configuration for tweaking. -- Jafar Calley Producer - http://moonlife-records.com -------------------------------------- See the latest Mars and Saturn images http://fatcat.homelinux.org |
|
|||
|
jafar wrote:
> On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote: > > >> On 2005-08-24, jafar <nooo@nospam.com> wrote: >> >>> Does anyone know of an iptables frontend that is able to import >>> existing rules? I want to play around doing things in gui, but >>> don't want to redo my rather extensive firewall script again. >> >> Can't you just copy your existing firewall script as a backup? >> If you don't like your changes, copy the script back. > > > I could, but would rather have the frontend read in my existing > configuration for tweaking. > iptables-save - (modify saved stuff) - iptables-restore? Bryan |
|
|||
|
In article <430df954$0$18644$14726298@news.sunsite.dk>,
Bryan Batten <me@here.invalid> wrote: :jafar wrote: :> On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote: :> :> :>> On 2005-08-24, jafar <nooo@nospam.com> wrote: :>> :>>> Does anyone know of an iptables frontend that is able to import :>>> existing rules? I want to play around doing things in gui, but :>>> don't want to redo my rather extensive firewall script again. :>> :>> Can't you just copy your existing firewall script as a backup? :>> If you don't like your changes, copy the script back. :> :> :> I could, but would rather have the frontend read in my existing :> configuration for tweaking. :> : :iptables-save - (modify saved stuff) - iptables-restore? That was my first thought, too, but upon reflection it seems he's looking for a GUI firewall builder that can be used to modify an existing hand-crafted firewall configuration. I don't know of any, and frankly I doubt that such a tool exists. OK, I've been surprised before, but expecting a tool to analyze a "rather extensive firewall" and map that into the primitives it uses in it's GUI is a tall order, akin to asking a C-language SDK to import assembly language and display it as meaningful C. -- Bob Nichols AT comcast.net I am "rnichols42" |
|
|||
|
jafar wrote:
> Does anyone know of an iptables frontend that is able to import existing > rules? I want to play around doing things in gui, but don't want to redo > my rather extensive firewall script again. Have a look at firestarter, <http://www.fs-security.com> |
|
|||
|
alien wrote:
> jafar wrote: > >> Does anyone know of an iptables frontend that is able to import existing >> rules? I want to play around doing things in gui, but don't want to redo >> my rather extensive firewall script again. > > Have a look at firestarter, <http://www.fs-security.com> Some time ago, and without much hope, I looked everywhere for a tool that could do this, and came up dry. I'm sure firestarter was part of that effort, and didn't make the grade for some reason. But, it's probably much better now (along with all the other tools), and I don't have the time to have another look. If anyone looks at firestarter, or other frontends, and finds something to rave about, I hope they post! Specifically, I was looking for something along the lines of the Robert Nichols' 8/25/05 post. I still haven't much hope, but I'd love to be surprised. |