iptables frontends?

This is a discussion on iptables frontends? within the Linux Security forums, part of the System Security and Security Related category; Does anyone know of an iptables frontend that is able to import existing rules? I want to play around doing ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-24-2005
jafar
 
Posts: n/a
Default iptables frontends?

Does anyone know of an iptables frontend that is able to import existing
rules? I want to play around doing things in gui, but don't want to redo
my rather extensive firewall script again.
Cheers

--
Jafar Calley
Producer - http://moonlife-records.com
--------------------------------------
See the latest Mars and Saturn images
http://fatcat.homelinux.org

Reply With Quote
  #2 (permalink)  
Old 08-24-2005
Keith Keller
 
Posts: n/a
Default Re: iptables frontends?

On 2005-08-24, jafar <nooo@nospam.com> wrote:
> Does anyone know of an iptables frontend that is able to import existing
> rules? I want to play around doing things in gui, but don't want to redo
> my rather extensive firewall script again.


Can't you just copy your existing firewall script as a backup? If you
don't like your changes, copy the script back.

--keith

--
kkeller-usenet@wombat.san-francisco.ca.us
(try just my userid to email me)
AOLSFAQ=http://wombat.san-francisco.ca.us/cgi-bin/fom
see X- headers for PGP signature information

Reply With Quote
  #3 (permalink)  
Old 08-24-2005
ynotssor
 
Posts: n/a
Default Re: iptables frontends?

"Keith Keller" <kkeller-usenet@wombat.san-francisco.ca.us> wrote in message
news:ajout2xkul.ln2@goaway.wombat.san-francisco.ca.us...

> > Does anyone know of an iptables frontend that is able to import existing
> > rules? I want to play around doing things in gui, but don't want to redo
> > my rather extensive firewall script again.

>
> Can't you just copy your existing firewall script as a backup? If you
> don't like your changes, copy the script back.


"Why do something reasonable when you can go to a lot of trouble?"

Reply With Quote
  #4 (permalink)  
Old 08-25-2005
jafar
 
Posts: n/a
Default Re: iptables frontends?

On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote:

> On 2005-08-24, jafar <nooo@nospam.com> wrote:
>> Does anyone know of an iptables frontend that is able to import existing
>> rules? I want to play around doing things in gui, but don't want to redo
>> my rather extensive firewall script again.

>
> Can't you just copy your existing firewall script as a backup? If you
> don't like your changes, copy the script back.


I could, but would rather have the frontend read in my existing
configuration for tweaking.

--
Jafar Calley
Producer - http://moonlife-records.com
--------------------------------------
See the latest Mars and Saturn images
http://fatcat.homelinux.org

Reply With Quote
  #5 (permalink)  
Old 08-25-2005
Bryan Batten
 
Posts: n/a
Default Re: iptables frontends?

jafar wrote:
> On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote:
>
>
>> On 2005-08-24, jafar <nooo@nospam.com> wrote:
>>
>>> Does anyone know of an iptables frontend that is able to import
>>> existing rules? I want to play around doing things in gui, but
>>> don't want to redo my rather extensive firewall script again.

>>
>> Can't you just copy your existing firewall script as a backup?
>> If you don't like your changes, copy the script back.

>
>
> I could, but would rather have the frontend read in my existing
> configuration for tweaking.
>


iptables-save - (modify saved stuff) - iptables-restore?


Bryan
Reply With Quote
  #6 (permalink)  
Old 08-26-2005
Robert Nichols
 
Posts: n/a
Default Re: iptables frontends?

In article <430df954$0$18644$14726298@news.sunsite.dk>,
Bryan Batten <me@here.invalid> wrote:
:jafar wrote:
:> On Wed, 24 Aug 2005 10:50:02 -0700, Keith Keller wrote:
:>
:>
:>> On 2005-08-24, jafar <nooo@nospam.com> wrote:
:>>
:>>> Does anyone know of an iptables frontend that is able to import
:>>> existing rules? I want to play around doing things in gui, but
:>>> don't want to redo my rather extensive firewall script again.
:>>
:>> Can't you just copy your existing firewall script as a backup?
:>> If you don't like your changes, copy the script back.
:>
:>
:> I could, but would rather have the frontend read in my existing
:> configuration for tweaking.
:>
:
:iptables-save - (modify saved stuff) - iptables-restore?

That was my first thought, too, but upon reflection it seems he's
looking for a GUI firewall builder that can be used to modify an
existing hand-crafted firewall configuration. I don't know of any,
and frankly I doubt that such a tool exists. OK, I've been surprised
before, but expecting a tool to analyze a "rather extensive firewall"
and map that into the primitives it uses in it's GUI is a tall order,
akin to asking a C-language SDK to import assembly language and
display it as meaningful C.

--
Bob Nichols AT comcast.net I am "rnichols42"
Reply With Quote
  #7 (permalink)  
Old 08-26-2005
alien
 
Posts: n/a
Default Re: iptables frontends?

jafar wrote:

> Does anyone know of an iptables frontend that is able to import existing
> rules? I want to play around doing things in gui, but don't want to redo
> my rather extensive firewall script again.


Have a look at firestarter, <http://www.fs-security.com>


Reply With Quote
  #8 (permalink)  
Old 08-26-2005
Greg Metcalfe
 
Posts: n/a
Default Re: iptables frontends?

alien wrote:

> jafar wrote:
>
>> Does anyone know of an iptables frontend that is able to import existing
>> rules? I want to play around doing things in gui, but don't want to redo
>> my rather extensive firewall script again.

>
> Have a look at firestarter, <http://www.fs-security.com>

Some time ago, and without much hope, I looked everywhere for a tool that
could do this, and came up dry. I'm sure firestarter was part of that
effort, and didn't make the grade for some reason. But, it's probably much
better now (along with all the other tools), and I don't have the time to
have another look. If anyone looks at firestarter, or other frontends, and
finds something to rave about, I hope they post!

Specifically, I was looking for something along the lines of the
Robert Nichols' 8/25/05 post. I still haven't much hope, but I'd love to be
surprised.

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 09:40 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0