FireHOL

FireHOL is a language to express firewalling rules, not just a script that produces some kind of a firewall.

http://firehol.sourceforge.net/

/etc/firehol/firehol.conf

version 5

interface eth0 internet
        server smtp accept
        server http accept
        server ssh accept
        server myservice accept

        client all accept

/etc/firehol/services/myservice.conf

#FHVER: 1:213

server_myservice_ports="tcp/1234"
client_myservice_ports="default"

/etc/firehol/services/*.conf が読み込み対象になる．

1行目に以下の形式でヘッダを記述する．

#FHVER: [メジャーバージョン]:[マイナーバージョン]

忘れたり形式を間違えたりすると読み込まれないので注意．

 >>> Ignoring service in '/etc/firehol/services/myservice.conf' due to malformed header.