Vuurmuur - fighting cats on guard of your network

Vuurmuur - behind such a "cat" name hides a fairly powerful GUI add-in for iptables. The main difference from other iptables add-ons is the presence of a console interface written in Ncurses . Therefore, administration is still easily possible through SSH or the console. Vuurmuur can work with shaping, supports traffic monitoring functions, maintains separate logs, works great on both 2.4 and 2.6 cores, and even “speaks” Russian.

Opportunities

Administration

• as always - no iptables knowledge required. Quite :)
• straightforward syntax for rules
• shaping
• Ncurses GUI, no need for X Window.
• easy port forwarding
• easy NAT setup
• secure default policy
• full control via ssh or console (including through PuTTY for Windows)
• scripts for integration with other tools
• the ability to build a bash script to set iptables rules on a system without vuurmuur
• means of countering IP-spoofing
• the possibility of breaking unwanted compounds
• work with Snort using QUEUE or NFQUEUE
• supported languages: English, German, Norwegian, French, Dutch, Portuguese and Russian
• clear and convenient help in Russian

Monitoring

• convenient viewing of logs in real time
• convenient viewing of connections in real time
• filtering when viewing logs
• basic traffic count
• search old logs

Accounting

• audit: all changes are recorded
• record all new connections and suspicious packets
• traffic counting

Installation

Gentoo

emerge -av layman
layman -f && layman -a sunrise
ACCEPT_KEYWORDS="~ARCH" emerge -av net-firewall/vuurmuur

Debian / Ubuntu

#Debian
echo "deb ftp.vuurmuur.org/debian etch main" >> /etc/apt/sources.list
#Ubuntu
echo "deb ftp.vuurmuur.org/ubuntu feisty main" >> /etc/apt/sources.list

apt-get update
apt-get install libvuurmuur vuurmuur vuurmuur-conf

For fans of manual installation: deb packages are on official FTP

Images

View Logs

View Connections

View traffic

rules

Shaping

Cartoons

Adding an interface
Adding a zone
Adding rules
Adding a host
Adding a redirect
Adding a service