1VUURMUUR_SCRIPT(8) User Commands VUURMUUR_SCRIPT(8)
2
3
4
6 Vuurmuur_script - scriptable commandline tool for administration of the
7 Vuurmuur IPTables frontend.
8
10 vuurmuur_script [-cvdhCDRMLPognzisrAOVS] [-d debug-level] [-o host] [-g
11 group] [-n network] [-z zone] [-s service] [-i interface] [-r ruleset]
12 [-V variable-name] [-S value]
13
14
16 -d [1 - 3]
17 enables debugging, 1 low, 3 high
18
19 -h, --help
20 gives this help
21
22 -v, --verbose
23 verbose mode.
24
25 Commands:
26 --block <name>
27 block host/group or ipaddress.
28
29 --unblock <name>
30 unblock host/group or ipaddress.
31
32 --list-blocked
33 list the hosts/group and ipaddresses that are blocked.
34
35 --reload
36 make Vuurmuur reload it's config.
37
38 -C, --create
39 create object.
40
41 -D, --delete
42 delete object.
43
44 -R, --rename
45 rename object.
46
47 -M, --modify
48 modify object.
49
50 -L, --list
51 list objects.
52
53 -P, --print
54 print data of object.
55
56 Object:
57 -o, --host <name>
58 host.
59
60 -g, --group <name>
61 group.
62
63 -n, --network <name>
64 network.
65
66 -z, --zone <name>
67 zone.
68
69 -s, --service <name>
70 service.
71
72 -i, --interface <name>
73 interface.
74
75 -r, --rule <name>
76 rule.
77
78 -V, --variable <variable>
79 variable to modify/print.
80
81 -S, --set <value>
82 value to set on modify, or new name when renaming.
83
84 -A, --append
85 append the variable on modify
86
87 -O, --overwrite
88 overwrite the variable on modify
89
90 --rule-numbers
91 print rule numbers
92
93 --apply
94 try to apply the changes directly to Vuurmuur
95
96 --no-apply
97 don't try to apply the changes to Vuurmuur
98
100 Gives a list of all groups:
101 vuurmuur_script --list --group any
102
103
104 Gives a list of all groups in network localnet.lan:
105 vuurmuur_script --list --group localnet.lan
106
107
108 Print content of host server.localnet.lan:
109 vuurmuur_script --print --host server.localnet.lan
110
111
112 Create an empty host:
113 vuurmuur_script --create --host pc1.localnet.lan
114
115
116 Set the host to active:
117 vuurmuur_script --modify --host pc1.localnet.lan --variable
118 ACTIVE --set Yes
119
120
121 Set the ipaddress of the new host:
122 vuurmuur_script --modify --host pc1.localnet.lan --variable
123 IPADDRESS --set 192.168.1.15
124
125
126 Append a rule to the rules list:
127 vuurmuur_script -M -r rules -V RULE -S "accept service ftp from
128 pc1.localnet.lan to firewall" -A
129
130
131 Add the ipaddress 1.2.3.4 to the blocklist:
132 vuurmuur_script --block 1.2.3.4
133
134
135 Remove an ipaddress from the blocklist:
136 vuurmuur_script --unblock 1.2.3.4
137
139 Copyright © 2002-2006 by Victor Julien <victor@vuurmuur.org>
140
142 The full documentation for Vuurmuur_conf is maintained as a wiki at
143 http://wiki.vuurmuur.org/
144
145 vuurmuur(8), vuurmuur_log(8), vuurmuur_conf(8)
146
147
148
149Vuurmuur_script 0.5.72 October 2006 VUURMUUR_SCRIPT(8)