About:
ferm is a tool to maintain and setup complicated firewall rules. It allows one to reduce the tedious task of carefully inserting rules and chains, thus enabling the firewall administrator to spend more time on developing good rules, and less time on the proper implementation of those rules. These rules will be executed by the preferred kernel interface, such as ipchains and iptables, and in one pass. Firewall rules can also be split into different files and loaded at will.

Author:
sofar [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.43/10.00 (4 votes)

Homepage:
http://ferm.foo-projects.org/
Tar/GZ:
http://ferm.foo-projects.org/download/1.3/ferm-1.3.3.tar.gz
Changelog:
http://ferm.foo-projects.org/download/1.3/NEWS
Debian package:
http://packages.debian.org/ferm
CVS tree (cvsweb):
http://svn.foo-projects.org/svn/ferm/releases/ferm-1.3.3/

Trove categories: [change]

[Development Status]		5 - Production/Stable
[Environment]		Console (Text Based)
[Intended Audience]		End Users/Desktop, System Administrators
[License]		OSI Approved :: GNU General Public License (GPL)
[Operating System]		POSIX :: Linux
[Programming Language]		Perl
[Topic]		System :: Networking :: Firewalls

Dependencies: [change]
No dependencies filed

 Branches

Branch	Version	Last release	License	URLs
Stable	1.3.3	22-Jan-2008	GNU General Public License (GPL)
Development	1.2beta2	09-Sep-2006	GNU General Public License (GPL)

 Comments

[»] Debian package
by sofar - May 2nd 2001 15:39:15

In case you're interested: there's a debian package available at ftp.debian.org, see the project homepage for it's exact location.

sofar

[reply] [top]

[»] Comments needed!
by sofar - Jan 8th 2001 11:19:27

Hi there!

I'm very anxious for comments, patches, bugreports, well, anything actually!
Does Ferm behave you expected it to be? Do you like the way ferm handles
rules? Wish something would work differently? Anything else?

sofar

[reply] [top]

[»] Re: Comments needed!
by Joost Cassee - Apr 16th 2002 07:36:39

I implemented IP filters for one gateway and two servers in a DMZ network with ferm, and it it VERY easy to setup. Way better then other filter setup scripts, because you don't lose the flexibility of the iptables system. The only thing missing is an init script to load a pre-defined ferm script (say, /etc/ip-filter.ferm). But this might be a job for packagers.

[reply] [top]

---