Vuurmuur - fighting cats on guard of your network

UUSER March 9, 2010 at 13:49

Vuurmuur - fighting cats on guard of your network

Vuurmuur - behind such a "cat" name hides a fairly powerful GUI add-in for iptables. The main difference from other iptables add-ons is the presence of a console interface written in Ncurses . Therefore, administration is still easily possible through SSH or the console. Vuurmuur can work with shaping, supports traffic monitoring functions, maintains separate logs, works great on both 2.4 and 2.6 cores, and even “speaks” Russian.

Opportunities

Administration

as always - no iptables knowledge required. Quite :)
straightforward syntax for rules
shaping
Ncurses GUI, no need for X Window.
easy port forwarding
easy NAT setup
secure default policy
full control via ssh or console (including through PuTTY for Windows)
scripts for integration with other tools
the ability to build a bash script to set iptables rules on a system without vuurmuur
means of countering IP-spoofing
the possibility of breaking unwanted compounds
work with Snort using QUEUE or NFQUEUE
supported languages: English, German, Norwegian, French, Dutch, Portuguese and Russian
clear and convenient help in Russian

Monitoring

convenient viewing of logs in real time
convenient viewing of connections in real time
filtering when viewing logs
basic traffic count
search old logs

Accounting

audit: all changes are recorded
record all new connections and suspicious packets
traffic counting

Installation

Gentoo

emerge -av layman

layman -f && layman -a sunrise

ACCEPT_KEYWORDS="~ARCH" emerge -av net-firewall/vuurmuur

Debian / Ubuntu

#Debian

echo "deb ftp.vuurmuur.org/debian etch main" >> /etc/apt/sources.list

#Ubuntu

echo "deb ftp.vuurmuur.org/ubuntu feisty main" >> /etc/apt/sources.list


apt-get update

apt-get install libvuurmuur vuurmuur vuurmuur-conf

For fans of manual installation: deb packages are on official FTP