Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Do you have any idea about a firewall software that it's capable to maintain multiple Linux machines via a web interface (or GUI)? I created myself such an application, but it's far from being usable on large scale. So I was wondering if there is any application that can store all firewall rules on one server and every server can start its firewall based on the rules located there. Also, a GUI would be a bonus.

Thanks.

share|improve this question

2 Answers 2

up vote 3 down vote accepted

In some ways, what you're trying to do is impossible. Since - to avoid a dangerous window of vulnerability - most distros bring up the firewall rules before they bring up the network interfaces, it's prima facie impossible to get the firewall rules over the network at boot time.

Once you accept that, you've redefined the problem as "how do I centrally maintain the configuration file(s) that control firewalling", and that leads naturally to centralised admin tools like Chef and Puppet.

Neither of those is specifically for writing distributed firewalls, so neither has a GUI in the sense the you're after one. But I, like others, would recommend that you continue to maintain your firewalls by editing the actual config files; the work of distributing them out to the many nodes can be minimised with one of the tools above.

share|improve this answer
    
That is one fantastic answer. –  SpacemanSpiff Dec 7 '11 at 12:06
    
That is very kind of you! –  MadHatter Dec 7 '11 at 13:14

You should have a look at fwbuilder. There is a client for Linux and Windows. It can handle Linux FW, Cisco, BSD etc. Its easy to use - though it hasn`t a webinterface…

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.