fwbuilder was: Linux Router ...

[Michael Hipp]

Keith Morse wrote:
> james at jamesmcdonald.id.au wrote:
>> For firewalling I use www.fwbuilder.org which has a nice graphical
>> interface and version control. You put the firewall script on the box
>> somewhere like /etc/firewall/<hostname>.fw and then configure it to be
>> triggered by /etc/ppp/ifup.local
>>   
> 
> I'd like to second this. In my opinion,  fwbuilder is one of the best
> software projects available out there.  The interface is second to none,
> allows for comments in your rulesets, and makes it easier for auditing
> purposes.

This looks interesting. Do I understand that you run this gui tool on 
your desktop of choice and then transfer the "compiled" firewall config 
to the firewall box? So no need for a gui on the firewall box?

If so, sounds like what I've been looking for.

Writing netfilter scripts by hand gets old fast.

Thanks,
Michael