fwbedit(1) Firewall Builder fwbedit(1) (NAME) fwbedit - (SYNOPSIS) fwbedit command [options] (DESCRIPTION) fwbedit Firewall Builder ( fwbuilder(1)). Firewall Builder . Fwbedit : . (ID) ( (EXAMPLES) ). (COMMANDS AND OPTIONS) new -f file.fwb -t objtype -n name -p parent [-c comment] [-a attrs] . -f file.fwb -t objtype -p parent . . . . . -n name -c txt -a attribute1[,attribute2...] : ( ) delete -f file.fwb -o object (ID). -f file.fwb -o object modify -f file.fwb -o object -c comment [-a attrs] . . -f file.fwb -o object -c txt -a attribute1[,attribute2...] : ( ) list -f file.fwb -o object [-r|-c] [-d|-Fformat] (ID) . -f file.fwb -o object -r -c -d . -Fformat_string . '%' '%name%' '%address%'. : "id" "name" "path" "comment" "type" "address" "netmask" "dnsname". TCP UDP "src_range_start" "src_range_end" "dst_range_start" "dst_range_end" . ICMP ICMP6 "icmp_type" "icmp_code" . add -f file.fwb -g group -o object . -f file.fwb -g group -o object remove -f file.fwb -g group -o object . -f file.fwb -g group -o object upgrade -f file.fwb . -f file.fwb checktree -f file.fwb . -f file.fwb merge -f file1.fwb -i file2.fwb file2.fwb file1 file1.fwb . -f file.fwb -i file.fwb import -f file1.fwb -i firewall_config.txt -o path_to_firewall_object [-d] firewall_config.txt file1.fwb . path_to_firewall_object . -f file.fwb -i config.txt -o object_path . "/User/Firewalls/my_new_firewall" -d ( 4.2.0) fwbuilder iptables iptables-save Cisco IOS Cisco PIX ASA FWSM "show run" . (ATTRIBUTES FOR THE NEW OBJECTS, BY TYPE) -t Firewall -a platform, host OS -t IPv4 -a IP address [,netmask] -t IPv6 -a IPv6 address [,masklen] -t DNSName -a DNS record,run time -t AddressRange -a start address, end address -t ObjectGroup -t Network -a address,netmask -t NetworkIPv6 -a ipv6_address,netmask_length -t Interval -a start time,start date,start day,end time, end date, end day -t Interface -a security level,address type (dynamic or unnumbered),management -t Host -t TCPService -a source port range start,end,destination port range start,end,UAPRSF,UAPRSF -t UDPService -a source port range start,end,Destination port range start,end -t ICMPService -a ICMP type,ICMP code -t IPService -a protocol number,lsrr/ssrr/rr/ts/fragm/short_fragm (EXAMPLES) /User/Firewalls/firewall/eth0 . "Interface" IP IPv4 IPv6 . fwbedit list -f x.fwb -o /User/Firewalls/firewall/eth0 -F "type=%type% name=%name% id=%id% %comment%" /User/Firewalls/firewall/eth0 . . "address" "%address%" . fwbedit list -f x.fwb -o /User/Firewalls/firewall/eth0 -F "type=%type% name=%name% id=%id% %comment% %address%" -r /User/Objects/Addresses: fwbedit list -f x.fwb -o /User/Objects/Addresses -F "type=%type% name=%name% id=%id% %comment%" /User/Objects/Addresses : fwbedit list -f x.fwb -o /User/Objects/Addresses -F "type=%type% name=%name% id=%id% %comment%" -r /User/Objects/Addresses : fwbedit list -f x.fwb -o /User/Objects/Addresses -F "type=%type% name=%name% id=%id% %comment%" -c : fwbedit list -f x.fwb -o /User/Firewalls -F "%path% %type% %id% %address% %netmask%" -r | grep IP : fwbedit list -f x.fwb -o /User/Firewalls -F "%name% platform: %platform% version: %version%" -c TCP TCP User: fwbedit list -f x.fwb -o /User/Services/TCP -c -F "name='%name%' est=%established% %src_range_start%-%src_range_end% : %dst_range_start%-%dst_range_end%" icmp ICMP ICMP User: fwbedit list -f x.fwb -o /User/Services/ICMP -c -F "name='%name%' icmp_type=%icmp_type% icmp_code=%icmp_code%" IPv6 "firewall": fwbedit new -f x.fwb -p /User/Firewalls/firewall/eth3 -t IPv6 -n eth3-v6-addr -a 2001:470:1f05:590::2,64 'A' 'B': fwbedit add -f x.fwb -g /User/Objects/Groups/B -o /User/Objects/Hosts/A id3D71A1BA id3D151943. fwbedit . fwbedit add -f x.fwb -o id3D71A1BA -g id3D151943 id3D71A1BA 'testgroup': fwbedit add -f x.fwb -o id3D71A1BA -g /User/Objects/Groups/testgroup "list" fwbedit /User/Objects/Addresses fwbedit "group1" . fwbedit list -f x.fwb -o /User/Objects/Addresses -F "%id%" -c | \ while read id; do \ fwbedit add -f x.fwb -g /User/Objects/Groups/group1 -o $id; \ done . "list" fwbedit /User/Objects/Addresses grep IPv6 fwbedit "group1" . fwbedit list -f x.fwb -o /User/Objects/Addresses -F "%type% %id%" -c | \ grep IPv6 | \ while read type id; do \ fwbedit add -f x.fwb -g /User/Objects/Groups/group1 -o $id; \ done (URL) Firewall Builder : http://www.fwbuilder.org (BUGS) SourceForge : http://sourceforge.net/tracker/?group_id=5314&atid=105314 (SEE ALSO) fwbuilder(1) FWB fwbedit(1)