[go: up one dir, main page]

Menu

Tree [7f638d] v.1.1.0 /
 History

HTTPS access


File Date Author Commit
 conf.d 2016-02-21 AllKind AllKind [98db22] Documentation updates.
 help.d 2016-02-21 AllKind AllKind [3d0bd5] Documentation updates.
 scripts.d 2016-02-21 AllKind AllKind [a2c090] Revert "Remove obsolet epilog script."
 template_repo.d 2015-04-09 AllKind AllKind [1e6e16] Changed xml syntax version to 1.0.
 README 2016-02-21 AllKind AllKind [12d57d] Update README.
 defaults.conf 2015-03-31 AllKind AllKind [fdd0a3] Added interactive template builder.
 gpl.txt 2011-01-13 AllKind AllKind [75c5db] Initial commit
 install.bash 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array.bin 2016-02-21 AllKind AllKind [7f638d] Bump version to 1.1
 ip-array.init 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array.init_pre_net_boot 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array_global_defs 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array_interactive_functions 2016-02-21 AllKind AllKind [873998] Interactive: Better describing menu option in r...
 ip-array_ipset_functions 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array_ipt_functions 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array_main_functions 2016-02-21 AllKind AllKind [ddd6e1] Change log message type in apply_rules().
 ip-array_tc_functions 2016-02-20 AllKind AllKind [78a850] Adapt copyright header.
 ip-array_xml_functions 2016-02-21 AllKind AllKind [8d57a9] Skip xml meta tags genericly.

Read Me

IP-ARRAY README


What is IP-Array?
	IP-Array is a command-line program (you may also say `script') written for bash
	(the bash shell www.gnu.org/software/bash).
	It's purpose is to configure IPv4 firewalling and traffic shaping of a linux host.
	To achieve this, IP-Array configures the linux kernels netfilter / traffic control
	subsystems via the userspace tools iptables / ipset / tc.
	It also allows to load and / or unload netfilter related kernel modules and
	configure the kernel via the `/proc' filesystem.

	Intended Audience: Advanced End Users, System Administrators.

	Field of application: From a single host system to a multi-homed router or gateway.

Where to get it?
	IP-Array is currently hosted at sf.net.
	The project page is at: http://sourceforge.net/projects/ip-array/.
	Its homepage is at: http://ip-array.sourceforge.net/.

Features
	It does support most features of iptables and some of xtables-addons.

	- Rules are written in simple XML.
		They can be written in different ways depending on the need.
		Either as (grouped / nested) XML tags, or so called ruleblocks,
		where only values have to be put into.
		Their structure is defined by custom templates.
	- Different start modi.
	- Custom epilog and prolog scripts for each start mode.
	- Muliple levels of output verbosity with optional syslog logging.
	- Coloured output (can be disabled).
	- Various /proc filesystem settings.
	- Automatic 'jump tree' creation options.
	- An interactive wizard based mode to create configuration files.
	- Public functions.
	- ipset support.
	- Some autoconfig presets for DNS, FTP, SMTP, NTP, IPSEC, etc.
	- The ability to save the generated iptables / ipset, tc rules, modprobe,
		or /proc commands to a file.
	- Error handling. Previous system states can be restored on error.
	- Traffic shaping.
	
Installation, Configuration, System Requirements, etc.
	Please read the reference manual.