Networking

09:44 AM
50%
50%

Firewall Builder: Faster, Friendlier Network Security

Looking for an effective, powerful, relatively easy to use firewall configuration tool? Allow me to introduce Firewall Builder -- a tool that just might become your new best friend.

Looking for an effective, powerful, relatively easy to use firewall configuration tool? Allow me to introduce Firewall Builder -- a tool that just might become your new best friend.Firewall Builder has been around for a while; both the Ubuntu and Fedora 8 Linux software repositories, for example, currently offer it to users. Although it is probably best known among Linux users, builds are also available for FreeBSD, OpenBSD, Windows, and Mac OS X.

Firewall Builder uses a dual-licensing model, in which versions for open-source operating systems carry an open-source (GPL) license, while those for commercial operating systems carry a commercial license. Versions that fall into the second category (i.e. those for Windows and Mac OS X) offer a fully-functional 30-day trial period, after which users are required to pay $79.00 for a commercial license.

Earlier this week, Vadim Kurland, a member of the Firewall Builder development team, posted a fairly thorough introductory tutorial on HowtoForge.com. Although I am not a network security expert by any means, I have been working through the tutorial, and it looks like a good way for anyone interested in trying Firewall Builder to get their feet wet.

Keep one thing in mind: When I say "relatively easy to use," I'm emphasizing the "relatively" part. Firewall Builder is designed to separate the process of defining a firewall policy from the process of actually implementing that policy; this allows, for example, a network administrator to swap out a router without being forced to define a new access-control policy from scratch for the new device. The tool uses a wizard-based process for setting up new firewall policies, using either pre-baked templates or policies created from scratch.

Firewall Builder supports a variety of firewall platforms, including iptables (a Linux network-security staple), ipfilter (commonly used with BSD and Solaris), ipfw, and pf. It also supports the firmware used with some Linksys firewall appliances, as well as Cisco PIX or IOS access control lists, making it especially useful for companies using either Linksys or Cisco routers.

Many small-business IT administrators aren't full-time networking pros -- but they still wind up bearing the burden of managing a company's network security hardware. If this sounds like the sort of thing that you do every day, Firewall Builder is probably worth a closer look.

Comment  | 
Print  | 
More Insights
Slideshows
Cartoon
Audio Interviews
Archived Audio Interviews
Jeremy Schulman, founder of Schprockits, a network automation startup operating in stealth mode, joins us to explore whether networking professionals all need to learn programming in order to remain employed.
White Papers
Register for Network Computing Newsletters
Current Issue
2014 Private Cloud Survey
2014 Private Cloud Survey
Respondents are on a roll: 53% brought their private clouds from concept to production in less than one year, and 60% ­extend their clouds across multiple datacenters. But expertise is scarce, with 51% saying acquiring skilled employees is a roadblock.
Video
Twitter Feed