IMPORTANT
This readme is *NOT* directions on how to use IPFWADM....
For directions on how to use IPFWADM see:

X/OS Experts in Open Systems 
	- http://www.xos.nl
Firewalling and Proxy Server HOWTO 
	- http://www.redhat.com/linux-info/ldp/HOWTO/Firewall-HOWTO.html
Linux IP Masquerade mini HOWTO
	- http://www.redhat.com/linux-info/ldp/HOWTO/mini/IP-Masquerade.html

INTRODUCTION
FW CONFIG is a utility that generates a Linux firewall script via a 
Netscape front end. We could have very easily executed the firewall rules from 
one of the CGI programs, instead, We create a script that can be modified by 
the administrator. This gives the administrator complete control over the 
program, which is generally a good idea.

REQUIREMENTS
In order to use this program (or the IPFWADM command for that matter), you have
to have root access to the Linux Firewall machine and you have to have a kernel 
that supports firewalling, IP masquerade, and firewall logging.

INSTALLATION
To install simply type 'make', this will build the cgi scripts. Then, 
(as root) type 'sh ./fixperms' this will set up the correct file ownerships 
and permissions on the cgi scripts. In order to use the IPFWADM you must be 
root. Most normal people do not run their web servers as root (I hope!) so 
that left me in a bind as to how I would execute the shell scripts. Thus, 
all CGI programs have to be "Set UID root".

USAGE
It's pretty straight forward, but there are a couple of things that need
explanation. First is that this version is very scalable. Say you want to
add your own list of services to the incoming and outgoing list...fine, 
all you have to do is edit the html file, and add them! Just keep the variable
names consistant. Example:

<b>HTTPS/PORT 443</b>   <INPUT TYPE="checkbox" NAME="chttps" VALUE="https">

say you want to add rlogin, just add this:

<b>LOGIN/PORT 513</b>   <INPUT TYPE="checkbox" NAME="clogin" VALUE="login">

and you are done! Say you want to add a few more misc rules to the html,
just copy and paste them and they are ready to use!

CHANGES
1.) Major changes from 1.1, now with misc rules, there is support for multiple
NICs. 
2.) Incoming and Outgoing rules are seperate now.
3.) The ability to add your own ports/services. (described above)
4.) More intelligent scripts...

APPLICATION NOTE:
When entering in an IP addr or Network addr, if you want a mask, add it 
along with the address, example: 

199.232.114.31/32 or 10.10.128.2/8 

All comments are welcome!
Open Professionals
info@openpro.org
