Converting ipfw.conf to iptables?

[dsr-mzpnVDyJpH4k7aNtvndDlA at public.gmane.org (Dan Ritter)]

On Tue, Mar 03, 2009 at 08:58:08AM -0500, Scott R. Ehrlich wrote:
> I recently received an ipfw.conf file from a friend's BSD box I was asked 
> to translate to Linux's iptables.   From what I've seen thus far, CentOS 
> has /etc/sysconfig/system-config-securitylevel that doesn't seem that 
> expansive.
> 
> I haven't fully ventured into the Ubuntu firewall config, yet.
> 
> What is the best, easiest way to perform the conversion for both CentOS 
> (5, 5.2) and Ubuntu (8.04, 8.10).

Step 1: convert into pseudocode, looking carefully at the ipfw
manual pages so you don't miss something.

Step 2: convert from pseudocode into iptables, looking carefully
at the LART/C and packet filtering docs to make sure you don't
miss something.

Step 3 (optional): optimize.

-dsr-


-- 
http://tao.merseine.nu/~dsr/eula.html is hereby incorporated by reference.

You can't defend freedom by getting rid of it.