NAME

       ipkungfu - An iptables-based firewall for Linux

SYNOPSIS

       ipkungfu [ -c ] [ -t ] [ -d ] [ -h ] [ -v ] [ --quiet ] [ --panic ] [ --no-caching

DESCRIPTION

       ipkungfu  is  an  iptables-based  Linux firewall. The primary design goals are security, ease of use, and
       performance, in that order. It takes advantage of advanced features of  iptables,  tcpwrappers,  and  the
       Linux  kernel. It also simplifies the configuration of internet connection sharing, advanced routing, and
       other networking needs.

OPTIONS

       -c  (or  --check)
                   Check whether ipkungfu is loaded, and report any command line options it may have been loaded
                   with.

       -t  (or  --test)
                   Runs a configuration test, and displays the results.  Note that this does not test or display
                   all configuration options.  This gives you an opportunity to verify that major  configuration
                   options are correct before putting them into action.

       -d  (or  --disable)
                   Disables  the  firewall.  It is important to know exactly what this option does.  All traffic
                   is allowed in and out, and in the case of a gateway, all  NATed  traffic  is  forwarded  (the
                   option  retains  your  connection  sharing  options).   Custom rules are not implemented, and
                   deny_hosts.conf is ignored.

       -f  (or  --flush)
                   Disables the firewall COMPLETELY.  All rules are flushed, all chains are removed.   Any  port
                   forwarding or internet connection sharing will cease to work.

       -h  (or  --help)
                   Displays brief usage information and exits.

       -v  (or  --version)
                   Displays version information and exits.

       --quiet     Runs ipkungfu with no standard output

       --panic     Drops ALL traffic in all directions on all network interfaces.  You should probably never use
                   this option.  The --panic option is available for the highly unusual situation where you know
                   that an attack is underway but you know of no other way to stop it.

       --failsafe  If  ipkungfu fails, --failsafe will cause all firewall policies to revert to ACCEPT.  This is
                   useful when working with ipkungfu remotely, to prevent loss of remote access due to  firewall
                   failure.

       --no-caching
                   Disables rules caching feature.

FILES

       /etc/ipkungfu/ipkungfu.conf
       /etc/ipkungfu/advanced.conf
       /etc/ipkungfu/accept_hosts.conf
       /etc/ipkungfu/deny_hosts.conf
       /etc/ipkungfu/custom.conf
       /etc/ipkungfu/log.conf
       /etc/ipkungfu/redirect.conf
       /etc/ipkungfu/services.conf
       /usr/sbin/ipkungfu
       /usr/share/doc/ipkungfu/AUTHORS
       /usr/share/doc/ipkungfu/README
       /usr/share/doc/ipkungfu/FAQ
       /usr/share/doc/ipkungfu/ChangeLog
       /usr/share/doc/ipkungfu/COPYING

SEE ALSO

       iptables(8).

                                                  January 2003                                       ipkungfu(8)