http://h34nug3iwqjf2376fmmzdhgqivckzemcujmarlptfqeqtq7vya47yyad.onion/2008/12/14/ferm-a-straightforward-firewall-configuration-tool/index.html
This does not necessarily scale well; if your firewall is to juggle packets between the outside world, a LAN and a DMZ, then you use the packet-flows (to/from each pair of networks) for your grouping not just the protocols. Serious firewalls can be written using simple bash and shell functions eg to build up an open-port profile for a service and then instantiate it via DNAT (”machine A gets ports (22,80,443); machine B gets ports (22,25)” etc). flavio Says: December 15th, 2008 at 11:45 am...