NAME

       mason - interactively create a firewall

SYNOPSIS

       mason < logfile > rulefile

DESCRIPTION

       This manual page briefly documents the mason command.

       mason interactively generates a set of firewall rules for a Linux-based firewall.  This is
       done by turning on full IP logging, watching the  logs  for  connections,  and  generating
       rules  describing  the  connections  seen.   mason  is familiar with most of the quirks of
       various connection types (such as ftp and IRC), and can output rules  for  2.0.x  ipfwadm,
       2.2.x ipchains, and Cisco packet filters.

       mason operates by reading in log file information from standard input and writing firewall
       rules to standard output.  This allows mason to work offline  or  on  a  separate  system.
       Real-time firewall generation can be achieved with a command like tail(1).

       Most   users   will   want   to   run   mason  with  a  user-friendly  interface  such  as
       mason-gui-text(1).

ENVIRONMENT

       mason is configured using the following environment variables.

       ECHOCOMMAND
              Sets the type of firewall rules that mason should output to standard out.   Allowed
              values  include  "ipfwadm" and "ipchains".  By default, mason outputs whatever kind
              of rules are supported by the currently running Linux kernel.

       DOCOMMAND
              Sets the type of firewall rules that mason should run immediately when  a  rule  is
              generated.   Allowed  values  include  "ipfwadm" and "ipchains".  By default, mason
              outputs whatever kind of rules are supported by the currently running Linux kernel.

       HEARTBEAT
              If set to "yes", mason will output a "+" or "-" to standard error whenever  a  rule
              generated by mason has been triggered.

       DYNIP  Set  this  to  the  list  of  interfaces  that have dynamically assigned addresses,
              separated by spaces.

SEE ALSO

       mason-gui-text(1)

AUTHOR

       This manual page was written by Jeff Licquia <jeff@luci.org>,  for  the  Debian  GNU/Linux
       system (but may be used by others).

                                                                                         MASON(1)