ipfwadm-wrapper - IP firewall administration

ipfwadm-wrapper -A "commandparameters[options]

ipfwadm-wrapper -I "commandparameters[options]

ipfwadm-wrapper -O "commandparameters[options]

ipfwadm-wrapper -F "commandparameters[options]

ipfwadm-wrapper -M "[-l|-s][options]

Ipfwadm-wrapper emulates the behaviour of ipfwadm. You can use this wrapper to use your old ipfwadm firewall rules with ipchains. See ipfwadm(8) for more details.

If the kernel does not support ipchains (eg. a 2.0 kernel), and the file /sbin/ipfwadm.real exists and is executable, then it will be executed with the arguments given to ipfwadm-wrapper. This allows simple dual-booting of 2.2 and 2.0 kernels with the same firewalling scripts: simply move ipfwadm to ipfwadm.real, and ipfwadm-wrapper to ipfwadm.

ipfwadm(8), ipchains(8)

The script isn't clever at parsing command line arguments. You must use separate arguments, rather than run them together. For example, `ipfwadm -Mle' becomes `ipfwadm-wrapper -M -l -e'.

Fragment accounting rules are not translated correctly; they will account packets with source port 65535.

Due to new kernel restrictions, you must be root even to list rules for 2.2 kernels.

If /usr is mounted from NFS, you will not be able to use ipfwadm-wrapper before /usr is mounted.

Paul ``Rusty'' Russell <ipchains@rustcorp.com>