Skip to content

Latest commit

 

History

History
34 lines (27 loc) · 1.02 KB

README.md

File metadata and controls

34 lines (27 loc) · 1.02 KB
Raw

Description

Merwall is a lightweight Linux firewall, built as Loadable Kernel Module and a userspace administration tool.

It is based on the Netfilter API for packet filtering and rule matching. Sysfs virtual filesystem is used for communication between userspace and kernelspace.

Build and launch

$ make
$ sudo insmod kmerwall.ko

Remove

$ sudo rmmod kmerwall
$ make clean

Examples

  • Drop all UDP traffic:
  • ./merwall_admin --proto UDP
  • Drop all UDP traffic to/from port 53.
  • ./merwall_admin --proto UDP --dstport 53
  • Allow all TCP traffic coming from 1.2.3.4:80
  • ./merwall_admin --action PASS --proto TCP --direction IN --srcip 1.2.3.4 --srcport 80
  • Allow outgoing traffic to port 80
  • ./merwall_admin --action PASS --dstport 80
  • Delete rule number 33
  • ./merwall_admin --delete 33
  • List all rules.
  • ./merwall_admin --list

ToDo

Update documentation: Installation, usage etc.,

Credits

  • Thanks to Djalal "tixxdz" Harouni ( http://opendz.org/ ) for all the tips, help and encouragement.