From 8e114bb3aa935b5a730d3ce55547870bb0a04ae9 Mon Sep 17 00:00:00 2001 From: Samuel Thibault Date: Mon, 29 Jul 2013 14:08:59 +0200 Subject: Add firewalling example --- hurd/translator/eth-filter.mdwn | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 hurd/translator/eth-filter.mdwn (limited to 'hurd') diff --git a/hurd/translator/eth-filter.mdwn b/hurd/translator/eth-filter.mdwn new file mode 100644 index 00000000..a026b0b9 --- /dev/null +++ b/hurd/translator/eth-filter.mdwn @@ -0,0 +1,23 @@ +[[!meta copyright="Copyright © 2013 Free Software Foundation, Inc."]] + +[[!meta license="""[[!toggle id="license" text="GFDL 1.2+"]][[!toggleable +id="license" text="Permission is granted to copy, distribute and/or modify this +document under the terms of the GNU Free Documentation License, Version 1.2 or +any later version published by the Free Software Foundation; with no Invariant +Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license +is included in the section entitled [[GNU Free Documentation +License|/fdl]]."]]"""]] + +`eth-filter` is a translator that implements a very simple stateless firewal. + +# Source + +[[source_repositories/incubator]], dde + +# Usage: + +For instance, to drop any attempt to access port 22: + + settrans -c /dev/eth0f /hurd/eth-filter -i /dev/eth0 -r "not port 22" + + settrans /servers/socket/2 /hurd/pfinet -i /dev/eth0f ... -- cgit v1.2.3