ipkungfu(8)

📦 version 0.6.1, in ubuntu jammy

💖 ipkungfu(8) — System Manager's Manual 💖

okay bestie, sit down, we're talking about ipkungfu, the iptables-based firewall for Linux. she's on page 8 of the System Manager's Manual and she's that girl.

✨ NAME ✨

ipkungfu — an iptables-based firewall for Linux 🥋🔥

🌸 SYNOPSIS 🌸

ipkungfu [ -c ] [ -t ] [ -d ] [ -h ] [ -v ] [ --quiet ] [ --panic ] [ --no-caching

(and yes, that bracket situation at the end is exactly how the original prints it, no I will not be fixing it, she's iconic like that 💅)

🦋 DESCRIPTION 🦋

so. ipkungfu is an iptables-based Linux firewall. her three main design goals, in order, are:

  1. security
  2. ease of use
  3. performance

in that exact order, no cap, security is the main character here 👑

she takes full advantage of the advanced features of iptables, tcpwrappers, and the Linux kernel — like, she's not just using them, she's using them. and she also simplifies the configuration of internet connection sharing, advanced routing, and other networking needs. lowkey a whole networking bestie 💖

🎀 OPTIONS 🎀

  • -c, --check — Checks whether ipkungfu is loaded, and reports any command line options it may have been loaded with. like a vibe check but for your firewall 🫶
  • -t, --test — Runs a configuration test and shows you the results. ⚠️ heads up bestie: this does not test or display all configuration options. what it does give you is a chance to verify that the major configuration options are correct before you actually put them into action. test before you commit, fr fr 🌸
  • -d, --disable — Disables the firewall. okay so it is super important to know exactly what this one does: all traffic is allowed in and out, and if you're running a gateway, all NATed traffic is forwarded (the option retains your connection sharing options). Custom rules are not implemented, and deny_hosts.conf is ignored. read that twice. 🙈
  • -f, --flush — Disables the firewall COMPLETELY. All rules are flushed, all chains are removed. Any port forwarding or internet connection sharing will cease to work. she's not being dramatic, she's being accurate 💀
  • -h, --help — Displays brief usage information and exits. the "just tell me what to do" option 🎀
  • -v, --version — Displays version information and exits. 🦋
  • --quiet — Runs ipkungfu with no standard output. silent but slaying ✨
  • --panic — Drops ALL traffic in all directions on all network interfaces. and listen: you should probably never use this option. like, genuinely. --panic exists for the highly unusual situation where you know an attack is underway but you know of no other way to stop it. emergency button energy. do not press for fun 😭
  • --failsafe — If ipkungfu fails, --failsafe will cause all firewall policies to revert to ACCEPT. this is useful when you're working with ipkungfu remotely, to prevent loss of remote access due to firewall failure. the "don't lock yourself out, babe" option 🫶🔐
  • --no-caching — Disables the rules caching feature. bye caching bestie 👋

🌈 FILES 🌈

  • /etc/ipkungfu/ipkungfu.conf
  • /etc/ipkungfu/advanced.conf
  • /etc/ipkungfu/accept_hosts.conf
  • /etc/ipkungfu/deny_hosts.conf
  • /etc/ipkungfu/custom.conf
  • /etc/ipkungfu/log.conf
  • /etc/ipkungfu/redirect.conf
  • /etc/ipkungfu/services.conf
  • /usr/sbin/ipkungfu
  • /usr/share/doc/ipkungfu/AUTHORS
  • /usr/share/doc/ipkungfu/README
  • /usr/share/doc/ipkungfu/FAQ
  • /usr/share/doc/ipkungfu/ChangeLog
  • /usr/share/doc/ipkungfu/COPYING

⭐ SEE ALSO ⭐

iptables(8).

and that's the whole page, bestie 💜 this one's from the System Manager's Manual, dated January 2003 — yes, she's an elder icon and she still eats 👑 mwah, go configure something safely 🎀✨

📦 where this page comes from