Topic: is there any firewall gui module for sme??

[prasann4u]

hi,
does anyone know about firewall frontend module for sme v6.0??

[vincentmeek]

Check out An easy firewall management system http://forums.contribs.org/index.php?topic=27217.msg120722#msg120722

Might want to try Firewall Admin
http://firewalladmin.sourceforge.net/index.php?newlang=en

Designed for iptables which sme 6x uses.

easily installs in Ibay

But beware rules can get a little confusing.  Make sure you understand how they work or you could block the wrong things and not be able to completely recover your original settings.

[CharlieBrady]

hi,
does anyone know about firewall frontend module for sme v6.0??

This is a frequently asked question and frequently given answer.

The server manager is the GUI front end for the firewall. The firewall is modified automatically in response to changes you make in the configuration, such as enabling/disabling services, marking them public/private, forwarding ports, etc.

If you wish to make changes beyond those provided for by the server manager, you can do so by providing custom templates.

[prasann4u]

dear, vincentmeek
thanks a lot to give amaizing idea,
currently downloading firewall admin,but there is not enough documentation about installation process.
if it is possible and u have any idea pls give me steps to install it.
thanks again

[prasann4u]

dear, vincentmeek
thanks a lot to give amaizing idea,
currently downloading firewall admin,but there is not enough documentation about installation process.
if it is possible and u have any idea pls give me steps to install it.
thanks again

[vincentmeek]

Some programs are necessary to Firewal Admin:

Apache with PHP 4 support
Command line programs like iptables, iptables-save e iptables-restore
sudo program to run iptables from apache as root
1. Finding iptables binaries

Run all commands below to determite absolute path:

updatedb

locate iptables*
  /sbin/iptables
  /sbin/iptables-save
  /sbin/iptables-restore

now make a backup copy of originals "JUST IN CASE"

cd /sbin
cp iptables iptables-org
cp iptables-save iptables-save-org
cp iptables-restore iptables-restore-org


Sudo configuration

First you'll need to discover what user runs apache, example:

[root@ftp root]# ps aux | egrep "(httpd|apache)"
root      2016  0.0  0.4  5884 2416 ?        S    21:06   0:00 /usr/sbin/httpd-a
admin     2825  0.0  0.4  5884 2424 ?        S    21:17   0:00 /usr/sbin/httpd-a
root      2938  0.0  1.3 80760 6824 ?        S    21:17   0:00 httpd
www       2941  0.0  1.3 80772 6908 ?        S    21:17   0:00 httpd
www       2942  0.0  1.3 80880 7032 ?        S    21:17   0:00 httpd
www       2943  0.0  1.3 80872 7056 ?        S    21:17   0:00 httpd
www       2944  0.0  1.3 80872 7052 ?        S    21:17   0:00 httpd
www       2945  0.0  1.3 80880 7088 ?        S    21:17   0:00 httpd
www       2946  0.0  1.3 80760 6828 ?        S    21:17   0:00 httpd
www       2947  0.0  1.3 80760 6828 ?        S    21:17   0:00 httpd
www       2948  0.0  1.3 80760 6828 ?        S    21:17   0:00 httpd
www       2949  0.0  1.3 80760 6828 ?        S    21:17   0:00 httpd
www       2950  0.0  1.3 80760 6828 ?        S    21:17   0:00 httpd

Apache is executed in sme6.x systems by www

mkdir /etc/e-smith/templates-custom/etc/ "it may already exist"
mkdir /etc/e-smith/templates-custom/etc/sudoers/

cp /etc/e-smith/templates/etc/sudoers/* /etc/e-smith/templates-custom/etc/sudoers/

edit /etc/e-smith/templates-custom/etc/sudoers/10root

add the following below any current entries:

www        ALL=NOPASSWD:   /sbin/iptables
www        ALL=NOPASSWD:   /sbin/iptables-save
www        ALL=NOPASSWD:   /sbin/iptables-restore

save and exit

expand template:
----------------
/sbin/e-smith/expand-template /etc/sudoers
/sbin/e-smith/signal-event console-save
/sbin/e-smith/signal-event reboot


wget -N http://internap.dl.sourceforge.net/sourceforge/firewalladmin/firewalladmin-0.4.tar.gz
wget -N http://firewalladmin.sourceforge.net/lang/firewalladmin-site-lang.tar.gz

Installing Firewall Admin

Unpack Firewal Admin tarballs

Create an ibay called fwadmin with php support

   Information bay name: fwadmin
   Description: Firewall Admin for iptables
   Group: Admin
   User access via file sharing or user ftp: Write = admin, Read = Group
   Public access via web or anonymous ftp: No access
   Execution of dynamic content (CGI, PHP, SSI): enabled

tar -xzf firewalladmin-0.4.tar.gz

mv firewalladmin-0.4/* /home/e-smith/files/ibays/fwadmin/html

tar -xzf firewalladmin-site-lang.tar.gz

mv lang-en.php /home/e-smith/files/ibays/fwadmin/html

Change write permissions of config.php to all (chmod a+w config.php)
delete or rename index.html

Setting up Firewall Admin

Put your browser to url where Firewall Admin was installed https://yourserver/fwadmin and choose Config to finish configuration process.

USE AT YOR OWN RISK !!!!

Have not tried this on SME 7

[Franco]

Vincent,
How do you deal with the templating system, so it keeps your rules saved after masq restarts?

Thanks,