Skip to content

Latest commit

 

History

History
59 lines (40 loc) · 1.86 KB

README.md

File metadata and controls

59 lines (40 loc) · 1.86 KB
Raw

ibdfw

infraBuilder firewall

ibdfw Twitter Follow

how to install ibdfw

ibdfw is published in Snapcraft store : https://snapcraft.io/ibdfw

Installation is as simple as :

sudo snap install ibdfw

You can generate your first config file with :

ibdfw config | sudo tee /var/snap/ibdfw/common/conf.d/main.conf

When applying rules for the first time, you have to connect firewall-control interface to ibdfw snap (error will be explicit, and will display the fixing command) :

ubuntu@fw:~$ sudo ibdfw apply
Could not use iptables. Please run:
  'sudo snap connect ibdfw:firewall-control'

Configuration

Configuration is made by all files finishing with ".conf" that are in /var/snap/ibdfw/common/conf.d/

You can generate a config sample with the command ibdfw config also available here : src/conf.d/main.conf.sample

Features

  • Easy NAT configuration for unidirectionnal (snat), bidirectionnal (1:1), port-forward NAT and NAT reflection

  • Comprehensive syntax for configuration

    Default input,forward drop
Default output accept
Forward from ip 10.1.1.0/24 to ip 10.2.2.0/24
Forward from iprange 10.0.0.1-10.0.0.145 to ip 10.24.78.0/24 ports tcp 80,443
Input port tcp 22,80,443
Input from ip 10.1.1.0/24 port tcp 8080
Nat unidirectionnal 10.0.0.0/8 via 5.6.7.8
Nat port-forward 5.6.7.8:1022 to 10.0.0.1:22
Nat reflection 10.0.0.0/8 on eth1

  • ibdfw is written in bash and is based on iptables

  • Standard input/output/default rules

  • Better router security with routing restrictions ( Forward instructions )

  • Support custom complex scenarii with Raw rules acting as iptables commands passthrough