Arch Linux

Panu

Member

From: UK

Registered: 2005-10-09

Posts: 27

firestarter replacement?

Just got Arch installed, and went to install firestarter - but no longer in the repos?!

Is there a replacement that lets me do masquerading (internet connection sharing) as easily? And no, I'm not going to learn iptables

lucke

Member

From: Poland

Registered: 2004-11-30

Posts: 4,018

Re: firestarter replacement?

Sharing connection takes only a couple of lines with iptables.

You might try shorewall, but you'd probably have to read on that more than you'd have to when using only iptables.

cleanrock

Member

Registered: 2008-11-17

Posts: 109

Re: firestarter replacement?

may i ask why firestarter was removed from AUR ?

JK3mp

Member

Registered: 2009-03-25

Posts: 105

Re: firestarter replacement?

I suggest IPTables, takes a bit of configuration, but not much really.

fukawi2

Ex-Administratorino

From: .vic.au

Registered: 2007-09-28

Posts: 6,231

Website

Re: firestarter replacement?

Back just for you:
http://aur.archlinux.org/packages.php?ID=27159

Perhaps it was removed during the recent clean-up of packages without licences? This PKGBUILD has a license identified.

It builds, but I haven't installed and tested it so please let me know if there's any problems with it.

EDIT: Doh! Writing PKGBUILD's at work when people are talking to you is a bad idea. PKGBUILD is borked. Badly. Fixing it now.

EDIT 2: Fixed now. And tested. Works on my desktop under Arch64. Apologies for being a nuffy.

Last edited by fukawi2 (2009-06-11 09:13:57)

---

Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?

BlueHackers // fscanary // resticctl

Gen2ly

Member

From: Sevierville, TN

Registered: 2009-03-06

Posts: 1,529

Website

Re: firestarter replacement?

I read in one blog post about gufw replacing firestarter.  Looks pretty basic but might be what you're looking for.

---

Setting Up a Scripting Environment | Proud donor to wikipedia - link

taz

Member

Registered: 2009-03-04

Posts: 24

Re: firestarter replacement?

iptables

---

linux is <3

fukawi2

Ex-Administratorino

From: .vic.au

Registered: 2007-09-28

Posts: 6,231

Website

Re: firestarter replacement?

iptables

I think you missed something the OP said...

...And no, I'm not going to learn iptables

---

Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?

BlueHackers // fscanary // resticctl

fukawi2

Ex-Administratorino

From: .vic.au

Registered: 2007-09-28

Posts: 6,231

Website

Re: firestarter replacement?

See edits to my post above RE: the AUR PKGBUILD

---

Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?

BlueHackers // fscanary // resticctl

2501

Member

Registered: 2008-05-17

Posts: 15

Re: firestarter replacement?

This is my rc.firewall that I wrote with a friend. You can use it if you want. I had the same issue that you have.
-2501

--

>Make sure you install iptables (pacman -S iptables)
>Create /etc/rc.d/rc.firewall
>chmod 700 /etc/rc.d/rc.firewall

----rc.d----

#!/bin/sh

firewall_start() {
iptables -F
iptables -t nat -F
iptables -t mangle -F

# Setting default policies
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP

# Basic Firewall
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

# Allow SSH
iptables -A INPUT -i eth+ -p tcp -m tcp --dport 22 -j ACCEPT

# Throw away
iptables -A INPUT -j DROP

# Allow non-passive FTP client
iptables -A INPUT -p tcp --dport ftp-data --jump ACCEPT

# No Telnet!
iptables -A OUTPUT -p tcp --dport telnet --jump REJECT

# Otherwise, drop inbound TCP packets with ICMP messages
iptables -A INPUT -p tcp --jump REJECT
iptables -A INPUT -p udp --jump REJECT

# Report
echo 'Firewall rules installed:'
iptables -L

}

>Add these commands on your rc.local:

----rc.local----

/etc/rc.d/rc.firewall start

# no spoofing
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done

> That should do it. Feel free to improve the code. Let us know....
-2501

Last edited by 2501 (2009-06-13 01:59:12)

droog

Member

Registered: 2004-11-18

Posts: 877

Re: firestarter replacement?

iptables

thats almost as bad as common-sense-2009.exe

2501

Member

Registered: 2008-05-17

Posts: 15

Re: firestarter replacement?

Also, you can turn-off ssh if you want.

Another good option would be pacman -S firehol.

http://firehol.sourceforge.net/

-2501

secretrice

Member

Registered: 2014-09-17

Posts: 5

Re: firestarter replacement?

Hello.
I downloaded firestarter from AUR, unpacked, and I tried to make a file, but there is no PKGBUILD file inside the archive. Is any other way to make a file from this archive or is it just oversight?

I'm sorry for a question which might be simple - I'm newbie. Iptables are still a higher level of abilities for me, so I don't think I can make it with that at the moment. I'd like to stay with firestarter at the beginning. So, I'm asking you for help.

Thank you in advance.

jasonwryan

Anarchist

From: .nz

Registered: 2009-05-09

Posts: 30,426

Website

Re: firestarter replacement?

Please don't necrobump https://wiki.archlinux.org/index.php/Fo … Bumping.27
You downloaded the wrong tarball...

Closing

---

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438