https://github.com/andersfugmann/borderline

Firewall compiler for Ipv4/6
https://github.com/andersfugmann/borderline

firewall ipv4 ipv6-address ocaml

Last synced: 3 months ago
JSON representation

Firewall compiler for Ipv4/6

• Host: GitHub
• URL: https://github.com/andersfugmann/borderline
• Owner: andersfugmann
• License: gpl-3.0
• Created: 2016-03-14T21:20:00.000Z (almost 9 years ago)
• Default Branch: master
• Last Pushed: 2023-08-28T16:18:54.000Z (over 1 year ago)
• Last Synced: 2024-10-08T15:25:34.215Z (4 months ago)
• Topics: firewall, ipv4, ipv6-address, ocaml
• Language: OCaml
• Size: 1000 KB
• Stars: 5
• Watchers: 4
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: Changelog
  • License: LICENSE

Awesome Lists containing this project

README

        
# Borderline

Borderline is a firewall generator for linux.

The idea is to have a simpler rule language, and an opimizing backend to

so rules can be written naively.

The firewall handles both ipv4 and ipv6 addresses

## Configuration

The idea is that the network is segmented into zones to easy specification

of rules to control traffic between zones.

Zones are usually one per interfaces, but not limited to this. Zones

are definedby a list of networks (ipv4 and ipv6) and a list of network

interfaces.

## Not handled yet

* MAC filtering

* System.d integraiton

* System settings checking (like ip_forward, log_martian)

# Installation

To be written

## Status

Version 1.0 is very close.

The firewall handles ipv4 and ipv6 addresses and output working nft script.