Projects / fwup


Firewall is a set of scripts (firewall, fwup, and fwdown) that implement an ipchains firewall and various forms of network address and port translation. All you have to do is read the policy file and edit it to reflect your topology and filtering policy. It supports many different types of network topology (single host, traditional forwarding, masquerading, port forwarding, alias port forwarding and NAT), up to 10 untrusted interfaces each with their own policy, and over 50 network applications. It also supports centralised administration of multiple remote firewalls (meta-firewall).

Operating Systems

Recent releases

  •  26 Jun 2002 13:01

    Release Notes: The migrate-policy script was added to import an existing policy file into a new policy file, making upgrading easier. Support was added for REACHOUT, TACACS+, multicast, and local PPTP server. The trojan list was updated. Reserved networks were updated. fwup was ported to LinuxRouter (including building LRP packages). Installation support for more PPP/DHCP client software packages was added. Support for selecting from among a set of policy files was added.

    •  15 Aug 2001 15:41

      Release Notes: Fixed redirection support, and updated the IANA reserved networks.

      •  01 Aug 2001 23:03

        Release Notes: Fixes for SNMP TRAP rules (source port 161, no return packets) and X11 client rules, and new X11 server rules.

        •  07 May 2001 17:51

          Release Notes: Centralised administration of multiple remote firewalls, removing the installation dependency on make, a new PC Anywhere and Windows Terminal server, bugfixes, and a new kernel config/module requirements document.

          •  14 Feb 2001 00:44

            Release Notes: A fix for bad tempfile creation with ipchains-Q.


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.