Firehol

Firehol je podle mého nejlepší nástavba nad iptables.

/etc/firehol/firehol.conf:

version 5

FIREHOL_LOG_LEVEL="7"

blacklist full "80.80.80.80/16"

# Accept all client traffic on any interface
interface any world
    protection strong
    server ident reject with tcp-reset
    server "http ssh" accept src "10.26.1.0/24"
    server "cups sane" accept src 10.26.1.58
    client all accept

/etc/firehol/services/sane.conf:

#FHVER: 1:213
server_sane_ports="tcp/6566"
client_sane_ports="default"

/etc/default/firehol:

START_FIREHOL=YES