Reply To: Simple (easy to manage) Firewall / Virtual Server Zeroshell

Home Page Forums Network Management ZeroShell Simple (easy to manage) Firewall / Virtual Server Zeroshell Reply To: Simple (easy to manage) Firewall / Virtual Server Zeroshell

#48348

zevlag
Member

Jeff,

This looks very possible.

I think best would be probably to leave the functionality of zeroshell pretty much as it is, as such we would just add a chain that gets processed after any rules added via ZS firewall manager, for VSERVERS. That way, you can still do administration and, override of vserver rules if desired.

I will also make some of the requirements you’ve listed optional via a config section at the top of the script, (ie chain POLICY) that way this script would be more reusable by the community.

I would want to discuss some of the specifics with you. ie. I don’t have the problem you do with having to create rules for return traffic, but with the possibility to vary iptables rules so much, that could be just a rules difference.

I want the output of this command on your current live box.

echo FILTER; iptables -L -v -t filter; echo NAT; iptables -L -v -t nat; echo MANGLE; iptables -L -v -t mangle; 

You can PM this to me if you’d like.