fireflier 1.1.7 / 1.99 Beta 2

fireflier is a firewall tool, which is built on top of the iptables framework. It all started in February 2002, when I was sitting on my computer and doing the firewall settings for a small server. I realized, that allthough I know about firewall rules, my desktop machine was not secure, with which I was working all the time.
The reason for this was very simple: It was just to annoying, to modify the rules all the time when I wanted to try something new (Shoutcasting, Samba, ...).
At that time I started searching for a tool to easily manage my firewall rules, but at that time my search was not successful. So I decided to write my own tool, which I wanted to be able to manage a firewall in a very convenient way. As I did some research, I soon realized, that the iptables offered a very convenient possibility, to pass packets down to userspace.
And so I started to write FireFlier, which should provide a personal firewall - easy to manage and with a nice interface.
Anyways: as the installation is not very easy, this project is aimed at system administrators, who do know a little about kernel compilation, and firewalls in general.
Nevertheless I will answer installation questions.
Main features:
- Client - Server:
- FireFlier is designed as a Client/Server model, which enables you to run the firewall part on one computer and the interface, for configuring the firewall on another computer
- Java/QT/Gtk Client:
- 1. There are three existing clients, which are compatible with the FireFlier server. The Java client, which enables you to configure your firewall from any operating system. (Windows, Mac OS X, ...).
- 2. The QT client, which works on Linux machines and looks quite nice (btw: the QT Client depends on QT 3.x)
- 3. And the Gtk client, which looks quite nice, too ;)
- Interaction:
- As every packet which is not so far matched by any rule appears automatically in the interface, you have got the possiblity to accept or deny single packets, or create rules based on these packets.
- Filtering by application:
- FireFlier is also capable of filtering by application. So you are for example able to simply allow your ICQ Client to do anything it wants.
- Timing-out rules:
- Consider the situation, that you want to allow a friend to access your computer for downloading some stuff. Granting him access to do that would usually mean, that you would have to block him a few hours later again, to "secure" your firewall. This is a task, which can be done by FireFlier itself. You just tell it, when you accept the packets, that the rule is only valid for 6 hours. After these six hours, the rule times out and you get a request again, if there is again a connection from his computer.