图形控制界面编辑配置各种防火墙规则的软件

心想事成

介绍：Object-oriented GUI and set of compilers for various firewall platforms. Currently implemented compilers for iptables, ipfilter, OpenBSD pf, ipfw and Cisco PIX主页：http://sourceforge.net/projects/fwbuilder/可以配置：fedoramandrakeredhatsuseDevilLinux floppyfw

DreamCat

收到~~！不错哦，linux下有原码，windows或者商业软件系统下要收费。哈哈。可惜我这里没有linux机器了，郁闷，只好先用windows下的了，30天试用的。主页URL: http://www.fwbuilder.org/

ycfei

MM不错..

DreamCat

。。。。。。。。。。。。。。。。。。佛说，色即是空，空即是色。阿弥陀佛，罪过，罪过~~

smile787

兄弟的佛经一般哦～  佛曰：

DreamCat

汗~~~“佛曰”

心想事成

Bifrost is a firewall management interface to iptables.The system is inspired by Checkpoint, Cisco PIX and Watchguard firewall management. We looked at the way Checkpoint works with source, destination, action and logging. At the same time, we work with incoming and outgoing traffic in a similar way as Watchguard and PIX Firewalls.简单的说就是web界面配置iptables参数的软件，安装简单，使用方便。如果大家安装好完全版本的linux,都可以将此软件安装到系统中，再也不用记复杂的iptables语法了。支持的系统：Redhat 7.2Redhat 7.3Redhat 8.0Mandrake 9.1主页在：http://bifrost.heimdalls.com/演示页面：http://bifrost.heimdalls.com/demo.html

心想事成

现在最新版本0.95安装方法：unzip Bifrost.n.n.n.tarmv ./Bifrost.n.n.n/Bifrost /etc/mv ./Bifrost.n.n.n/iptables /etc/sysconfig/mv ./Bifrost/fw.cgi  /var/www/cgi-bin/chown apache.apache /etc/Bifrost/*chown apache.apache /etc/Bifrostchown apache.root /etc/sysconfig/iptables#Give apache access to the iptables boot config file. (The cgi is updating it.)chown root.apache /sbin/iptableschown root.apache /sbin/iptables-save#On some installations iptables and iptables-save requre apache to be the group in order to execute.chmod +x /sbin/iptableschmod +s /sbin/iptableschmod +s /sbin/iptables-savechmod +r /var/log/messageschmod +s /sbin/modprobechmod +s /sbin/insmodchmod +x /var/www/cgi-bin/fw.cgicp bg/marble.jpg /var/www/icons/ #If your icons/images directory is different,change the path and update the $body parameter in fw.cgi.(There is boot script included that can be used to start Bifrost during boot. Please see more information further down in this document.)Make sure Apache is the owner of the files in /etc/Bifrost/* (chown apache.apache /etc/Bifrost/*If your cgi-bin directory is located elsewhere, you need to modify fw.cgi and change $cgipath to the path of your cgi directory. fw.cgi may need the sticky bit in order to be able to work with iptables. If you know a better way of working with iptables, pleas feel free to send feedback.It is important to secure and lock down apache. It is recommended to enable authentication. It is also recommended to restrict access based on ip address. Only allow access to the cgi from ip addresses that are allowed to do changes "Management Clients".I'm not an expert on apache, feel free to send me an example of httpd.conf that is locked down.It is also important to use tcpwrappers to restrict the access further.Please see Secure_Apache.txt for more information.

心想事成

图片一

心想事成

图片二