Projects / PMFirewall


PMFirewall is an Ipchains Firewall and Masquerading Configuration Utility for Linux. It is designed to allow a beginner to build a custom firewall with little or no ipchains experience. This firewall should work for most Workstations, Servers, and Dual NIC routers using either a dialup, DSL, Cable, or LAN setup. It is restrictive to outside attacks while still being as transparent as possible to those inside.


Recent releases

  •  28 Mar 2000 20:32

    Release Notes: A man page, chkconfig commands for RedHat-based systems, the ability to turn off IP autodetection and specify the IP address during install, backups of previous installations, the ability to specify IP ranges for ports, rules file loading reorganizations, generated rules are added to rules.local instead of rules.2, rules will now load in proper order, an uninstall script, and fixes for various small bugs.

    •  01 Dec 1999 22:58

      Release Notes: A fix for a problem with pmfirewall starting before pcmcia ethernet cards were activated, causing the firewall not to activate, use of a reject flag instead of denal of IDENTD requests to fix timeouts problems for services that require an AUTH response, better DHCP compatibility for cable modem users, support for a DHCP server on the internal interface, a new pmfirewall.rules.local file to add your own rules, a new restart function, and a new startup option to ip-up.local for PPP (now PPP users won't have to restart pmfirewall each time they are assigned a new IP).

      •  10 Nov 1999 06:12

        Release Notes: Support for most popular distributions of Linux, a new display of detected interface and network information on firewall start, and code-cleanups and error checking.

        •  02 Nov 1999 17:19

          Release Notes: A bug was fixed which caused masquerading to be installed even if you chose not to enable it; plus a few small cosmetic fixes. Mailing List is now active. Please upgrade.

          •  01 Nov 1999 10:47

            Release Notes: Initial public release.

            Recent comments

            09 Aug 2001 17:55 masonry

            Re: ppp correction
            Oh, btw - that was on Redhat 6.2, patches current.

            09 Aug 2001 17:53 masonry

            ppp correction
            This is not a fault in pmfirewall but is relevant to ppp users of pmfirewall

            I noticed in the mailing list archives there were frequent problems with users finding PMF did not update the external ip when ppp was started. I experienced the same problem.

            I noticed that the of the ip-up.local script was not executeable and as soon as I chmod the file and added executeable rights the script ran a "pmfirewall start" command and all was right in the world.

            03 Feb 2000 16:52 jimwitterschein

            PMFirewall 1.1.3 On Mandrake 7.0 (Air)
            Simply put, it was quite easy for me as a Linux novice to install and setup what appears to be a very effective firewall using PMFirewall 1.1.3. I did this recently on a new Mandrake 7.0 workstation.

            I can confirm that PMFirewall is working effectively because I have two Windows boxes on my private LAN. One is Win2000 Pro, the other NT WS 4.0. Both have Black Ice Defender installed with the latest update. Prior to setting up Mandrake w/PMFirewall, my WinBLOWS boxes w/BID were reporting 3-5 atttacks during the week and as a much as 8 per day on the weekends. Since installing Linux w/PMFirewall, I see ZERO attacks on the pvt network.

            Great Job, Rick! I highly recommend it to anyone wishing to implement a Linux Firewall w/IP Masquerading.

            10 Nov 1999 13:21 ericduke

            PMFirewall with Debian 2.1

            I got PMFirewall 1.1.2 up and running on my Debian 2.1 server with kernel 2.2.13. It runs perfect, with 1.1.1 i had some problems but i have upgraded 4 hours ago and still not the problems i had with 1.1.1.

            Greetings Eric


            Project Spotlight


            A Fluent OpenStack client API for Java.


            Project Spotlight

            TurnKey TWiki Appliance

            A TWiki appliance that is easy to use and lightweight.