EUREPHIADM-FWPROFILES(7)

💖 EUREPHIADM-FWPROFILES(7) 💖

okay bestie, listen up — this is eurephiadm fwprofiles, section 7 of the manual, and it's literally the glow-up guide for your firewall profiles. no cap.

---

✨ NAME ✨

eurephiadm-fwprofiles — configuring eurephia firewall profiles 🎀

---

🌸 SYNOPSIS 🌸

eurephiadm fwprofiles --list|-l [-v|--verbose] [-a|--accessprofile <acc. ID>] [-f|--fw-destination  <name>] [-i|--uid  <user ID>] [-n|--username <username>] [-c|--certid  <cert ID>] [-e|--email  <e-mail address>] [-d|--digest  <certificate SHA1 digest>]
eurephiadm fwprofiles --add|-A [-d|--description <Description>] [-f|--fw-destination  <name>]
eurephiadm fwprofiles --delete|-D [-a|--accessprofile  <acc. ID>] [-f|--fw-destination  <name>]

---

🦋 DESCRIPTION 🦋

so the eurephia plug-in can lowkey flex the OS firewall and give you fine grained access control for every single OpenVPN client. iconic behaviour tbh.

the thing is, the preconfigured firewall chains that eurephia gets to play with? they have to be defined first, and this is the eurephiadm command that does it. 💅

and once you've defined your firewall profiles here, you can assign them to all the different user accesses you've enabled. it's giving ✨organization✨. periodt.

---

👑 MODES 👑

available modes for the fwprofiles command are:

• -A | --add — [-d|--description <Description>] [-f|--fw-destination <name>]

add a brand new firewall profile, slay. both --description and --fw-destination are required — no skipping, bestie. the --description is just there to give a human readable description of the firewall profile name, and honestly it's only used in the different reports available in eurephiadm. so it's the ~aesthetic~ field. 💖

• -D | --delete — [-a|--accessprofile <acc. ID>] [-f|--fw-destination <name>]

delete a firewall profile. either --accessprofile or --fw-destination must be provided — you gotta tell it which one, it's not a mind reader. 😭

• -l | --list — [-v|--verbose] [-a|--accessprofile <acc. ID>] [-f|--fw-destination <name>] [-i|--uid <user ID>] [-n|--username <username>] [-c|--certid <cert ID>] [-e|--email <e-mail address>] [-d|--digest <certificate SHA1 digest>]

list available firewall profiles. with no arguments at all, you get a simple overview over all registered firewall profiles — cute and quick. but if you pass the --verbose argument, the list will be way more comprehensive. 📋✨

the rest of the arguments are filters, and they're used to reduce the length of the list. you can stack multiple filters, but heads up: they'll only work as additional "AND" argument in the query. so more filters = narrower results, not more results. iykyk.

• -h | --help — <mode>

show a help screen. with no arguments, all modes are listed. provide a mode and you'll get more information about the chosen mode. it's the friend who actually explains things. 🫶

---

🌈 FILTERS 🌈

these filters are used by the --list mode.

• -a | --accessprofile <id> — numeric ID defining the access profile ID.
• -f | --fw-destination <name> — the firewall reference for the chain used by the OS when filtering the OpenVPN client traffic.
• -i | --uid <user id> — numeric user ID.
• -n | --username <username> — user name.
• -c | --certid <certid> — numeric reference to a certificate.
• -e | --email <email addr> — e-mail address in certificates.
• -d | --digest <SHA1 digest> — certificate SHA1 digest.

---

💜 SEE ALSO 💜

eurephiadm(7), eurephiadm-usercerts(7)

---

⭐ AUTHOR ⭐

Copyright (C) 2008-2012 David Sommerseth <dazo@users.sourceforge.net>

---

and that's the whole page, bestie 🎀 this was eurephiadm fwprofiles(7), brought to you by David Sommerseth, dated July 2010, and it absolutely ate. go define some firewall profiles. 💅✨🦋