NAME

       ipkungfu - An iptables-based firewall for Linux

SYNOPSIS

       ipkungfu [ -c ] [ -t ] [ -d ] [ -h ] [ -v ] [ --quiet ] [ --panic ] [ --no-caching

DESCRIPTION

       ipkungfu  is an iptables-based Linux firewall. The primary design goals are security, ease
       of use, and performance, in that  order.  It  takes  advantage  of  advanced  features  of
       iptables,  tcpwrappers,  and  the  Linux  kernel.  It also simplifies the configuration of
       internet connection sharing, advanced routing, and other networking needs.

OPTIONS

       -c  (or  --check)
                   Check whether ipkungfu is loaded, and report any command line options  it  may
                   have been loaded with.

       -t  (or  --test)
                   Runs  a configuration test, and displays the results.  Note that this does not
                   test or display all configuration options.  This gives you an  opportunity  to
                   verify  that  major configuration options are correct before putting them into
                   action.

       -d  (or  --disable)
                   Disables the firewall.  It is important to know exactly what this option does.
                   All  traffic  is  allowed  in and out, and in the case of a gateway, all NATed
                   traffic is forwarded (the option retains  your  connection  sharing  options).
                   Custom rules are not implemented, and deny_hosts.conf is ignored.

       -f  (or  --flush)
                   Disables  the  firewall  COMPLETELY.   All  rules  are flushed, all chains are
                   removed.  Any port forwarding or internet connection  sharing  will  cease  to
                   work.

       -h  (or  --help)
                   Displays brief usage information and exits.

       -v  (or  --version)
                   Displays version information and exits.

       --quiet     Runs ipkungfu with no standard output

       --panic     Drops  ALL  traffic  in  all directions on all network interfaces.  You should
                   probably never use this option.  The  --panic  option  is  available  for  the
                   highly  unusual  situation  where  you know that an attack is underway but you
                   know of no other way to stop it.

       --failsafe  If ipkungfu fails, --failsafe will cause all firewall policies  to  revert  to
                   ACCEPT.   This  is useful when working with ipkungfu remotely, to prevent loss
                   of remote access due to firewall failure.

       --no-caching
                   Disables rules caching feature.

FILES

       /etc/ipkungfu/ipkungfu.conf
       /etc/ipkungfu/advanced.conf
       /etc/ipkungfu/accept_hosts.conf
       /etc/ipkungfu/deny_hosts.conf
       /etc/ipkungfu/custom.conf
       /etc/ipkungfu/log.conf
       /etc/ipkungfu/redirect.conf
       /etc/ipkungfu/services.conf
       /usr/sbin/ipkungfu
       /usr/share/doc/ipkungfu/AUTHORS
       /usr/share/doc/ipkungfu/README
       /usr/share/doc/ipkungfu/FAQ
       /usr/share/doc/ipkungfu/ChangeLog
       /usr/share/doc/ipkungfu/COPYING

SEE ALSO

       iptables(8).

                                           January 2003                               ipkungfu(8)