Firewalling with FireHOL

FireHOL allows you to configure your firewall using a "high-level" language that anyone can read. Meanwhile, it allows all the power and flexibility you have come to expect from iptables.

FireHOL's configuration is very readable, allowing you to specify services and networks by name, rather than as sets of numbers. FireHOL also automatically loads the needed iptables modules depending on the services you enable (irc, ftp, etc.) taking away the guess work. All in all, this makes for a shorter, simpler firewall config file that can be read and understood by others quickly and easily leaving less room for human error.

FireHOL can be run interactively, returning the iptables it generates for each command you give it. Built using BASH, FireHOL can use BASH statements directly in the configuration file, allowing for even greater flexibility.

I recommend anyone running a Linux server or using Linux as a router/firewall to checkout FireHOL to see what it can do for you.