Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I need apply the same rules (lists of IPs with allow and drop rules) in firewalls of Linux and *BSD. Do you know some application (CLI) for to convert a list of rules in the specific format of each firewall?.

The application for to convert the rules is only a idea. Other solutions for the problem are welcome.

share|improve this question

2 Answers 2

http://www.fwbuilder.org/

Firewall Builder supports a wide range of firewall platforms, including Cisco ASA & PIX, Linux iptables, BSD pf and many more. You’re not confined to one platform—or locked into a single vendor.

See the intro: http://www.fwbuilder.org/4.0/docs/firewall_builder_intro.html

share|improve this answer
    
Thanks. I know the tool but I need a CLI application. –  J.F. Sep 10 '11 at 20:02
    
Why? Fwbuilder doen't have to be on the actual firewall. You can prepare the rules on a workstation. I haven't really used it much, but it is an open souce project. You may be able to extract the conversion features... –  Zoredache Sep 11 '11 at 0:35
    
Because is for an automatic script and the rules will be in a central server. I don't need extract the conversion code, I think the conversion is easy but I would like a well tested tool. –  J.F. Sep 11 '11 at 1:42
1  
It (at least v5) has a cli: fwbuilder.org/4.0/man1/fwbedit.1.html –  Mark Wagner Sep 28 '11 at 1:26

Such conversion is not always possible, since different packet filters have different logic and packet processing scheme. For example, there is no simple and straight way to convert iptables rules (with all those tables and chains) to ipfw or pf rules. It's better to just write new ruleset for needed firewall type with knowing what you need to get in the end.

share|improve this answer
    
Good point. I only need convert lists of IPs and rules like allow and drop. No more. –  J.F. Sep 28 '11 at 1:12
    
in such case it should be pretty easy to write simple shell-script for conversions. –  gelraen Sep 28 '11 at 7:59
    
Yes, I asked for a existing solution but is not a difficult task. –  J.F. Sep 28 '11 at 8:07

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.