: firehol.sh,v 1.231 2004/11/01 00:13:00 ktsaou Exp $
(C) Copyright 2003, Costa Tsaousis <costa@tsaousis.gr>
FireHOL is distributed under GPL.
Home Page: http://firehol.sourceforge.net
--------------------------------------------------------------------------------
FireHOL controls your firewall. You should want to get updates quickly.
Subscribe (at the home page) to get notified of new releases.
--------------------------------------------------------------------------------
You can now start typing FireHOL configuration directives.
Special interactive commands: help, show, quit
# FireHOL [:] > interface any world
# \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
# Cmd Line : 1
# Command : interface any world
# Creating chain 'in_world' under 'INPUT' in table 'filter'
/sbin/iptables -t filter -N in_world
/sbin/iptables -t filter -A INPUT -j in_world
# Creating chain 'out_world' under 'OUTPUT' in table 'filter'
/sbin/iptables -t filter -N out_world
/sbin/iptables -t filter -A OUTPUT -j out_world
# > OK <
# FireHOL [interface:world] > client dhcp accept
# \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
# Cmd Line : 2
# Command : client dhcp accept
# Preparing for service 'dhcp' of type 'client' under interface 'world'
# Creating chain 'in_world_dhcp_c1' under 'in_world' in table 'filter'
/sbin/iptables -t filter -N in_world_dhcp_c1
/sbin/iptables -t filter -A in_world -j in_world_dhcp_c1
# Creating chain 'out_world_dhcp_c1' under 'out_world' in table 'filter'
/sbin/iptables -t filter -N out_world_dhcp_c1
/sbin/iptables -t filter -A out_world -j out_world_dhcp_c1
# Running simple rules for client 'dhcp'
/sbin/iptables -t filter -A out_world_dhcp_c1 -p udp --sport bootpc --dport 67 -m state --state NEW\,ESTABLISHED -j ACCEPT
/sbin/iptables -t filter -A in_world_dhcp_c1 -p udp --sport 67 --dport bootpc -m state --state ESTABLISHED -j ACCEPT
# > OK <
# FireHOL [interface:world] > quit
version 5
interface any world
client dhcp accept