fwb_pix(1)

✨ fwb_pix(1) — the Firewall Builder compiler for Cisco IOS ACLs 💅

okay bestie, sit DOWN, we're compiling Cisco IOS ACLs today and it's gonna be iconic 🎀

🌸 NAME 🌸

fwb_ipt — Policy compiler for Cisco IOS ACL

(yes the name up there says fwb_ipt and the page title says fwb_pix and the actual command is fwb_iosacl… the manpage family is a little chaotic, we love her anyway 💀 not me pointing it out, just keeping it 100)

🦋 SYNOPSIS 🦋

fwb_iosacl [-vV] [-d wdir] [-4] [-6] [-i] -f data_file.xml object_name

💖 DESCRIPTION 💖

so fwb_iosacl is the firewall policy compiler component of Firewall Builder — go peek at fwbuilder(1) if you wanna meet the whole squad. The compiler reads your object definitions and the firewall description from the data file you hand it with the -f option, and then it generates a resultant Cisco IOS ACL configuration file. ✨

The config gets written to a file whose name is literally the same as the name of the firewall object, plus the extension .fw. Simple. Clean. Slay.

The compiler generates extended access lists for Cisco routers running IOS v12.x, using the ip access-list <name> syntax. It also generates ip access-group commands to assign those access lists to interfaces. 🫶

And then? You can upload that generated ACL configuration to the router manually, or use the built-in installer in the fwbuilder(1) GUI. main character energy either way.

heads up bestie: the data file and the name of the firewall objects must be specified on the command line. Everything else is optional. no cap.

✨ OPTIONS ✨

• -4 — Generate iptables script for the IPv4 part of the policy. If any rules of the firewall refer to IPv6 addresses, the compiler will skip those rules. Options -4 and -6 are exclusive. If you use neither option, the compiler tries to generate both parts of the script, although generation of the IPv6 part is controlled by the option "Enable IPv6 support" in the "IPv6" tab of the firewall object advanced settings dialog. This option is off by default.
• -6 — Generate iptables script for the IPv6 part of the policy. If any rules of the firewall refer to IPv6 addresses, the compiler will skip these rules.
• -f FILE — Specify the name of the data file to be processed. 📄
• -d wdir — Specify working directory. The compiler creates the file with the ACL configuration in this directory. If this parameter is missing, then the generated ACL will be placed in the current working directory. 🗂️
• -v — Be verbose: the compiler prints diagnostic messages while it works. she's chatty, let her talk 💬
• -V — Print version number and quit. 👋
• -i — When this option is present, the last argument on the command line is supposed to be the firewall object ID rather than its name. 🆔

🌈 URL 🌈

Firewall Builder home page is located at the following URL:

http://www.fwbuilder.org/

💀 BUGS 💀

Please report bugs using the bug tracking system on SourceForge:

http://sourceforge.net/tracker/?group_id=5314&atid=105314

👑 SEE ALSO 👑

fwbuilder(1), fwb_pix(1), fwb_ipfw(1), fwb_ipf(1), fwb_ipt(1) fwb_pf(1)

that's the whole page bestie, you ate it up fr fr 🍓

FWB · fwb_pix(1) — mwah, love u, go compile something gorgeous 💜✨