lokkit, gnome-lokkit - simple firewall configuration tool

gnome-lokkit [options]

lokkit [options]

This manual page briefly documents the gnome-lokkit and lokkit commands. This manual page was written for the Debian distribution because the original programs do not have a manual page. Instead, it has documentation in HTML format; see below.

lokkit is a basic firewall configuration tool, designed for ease of use and configuration. While it does not meet the needs for a corporate firewall, it is more than sufficient for workstations and for most home network gateways. It can also help detect if you are running an open mail relay.

These programs follow the usual GNU command line syntax, with long options starting with two dashes (`-'). A summary of options is included below.

-h, --help

Show summary of options.

--version

Show version of program. (gnome-lokkit only)

-f, --fwtype

Write Red Hat-style ipchains rules, rather than a shell script.

These options are only supported by lokkit.

-q, --quiet

Run non-interactively; only the command-line arguments will be processed.

-n, --nostart

Do not start the firewall after configuration.

--high

Use the highest security level (default).

--medium

Use the medium security level.

--disabled

Disable the firewall.

--dhcp

Allow DHCP messages through the firewall. If your machine is configured using DHCP, you probably should enable this.

-p port:protocol, --port=port:protocol

Allow a specific port through the firewall. Ports can be either numeric or listed in /etc/services, while protocols can be numeric or listed in /etc/protocols. For example, to allow active-mode FTP to work, use ftp-data:tcp.

-t device, --trust=device

Trust all traffic on the specified device (for example, eth0).

--usage

Show a brief usage message.

ipchains(8) /etc/services /etc/protocols

The programs are documented fully in the GNOME Help system.

This manual page was written by Chris Lawrence <lawrencc@debian.org>, for the Debian GNU/Linux system (but may be used by others).

lokkit and gnome-lokkit were written by Alan Cox <alan@redhat.com> and documented by Alan Cox and Telsa Gwynne <telsa@linuxchix.org>.