Menu

Tree [a1f4f7] master dev v.1.2.8 /
 History

HTTPS access


File Date Author Commit
 conf.d 2016-03-24 AllKind AllKind [e705e2] Make BLOCK_INVALID and BLOCK_ILLEGAL default to...
 help.d 2016-03-24 AllKind AllKind [26d157] Update documentation.
 scripts.d 2016-02-21 AllKind AllKind [a2c090] Revert "Remove obsolet epilog script."
 template_repo.d 2016-03-19 AllKind AllKind [0f3f4d] Add short description about gobal templates.
 README 2016-03-21 AllKind AllKind [2fbbff] Update documentation.
 defaults.conf 2016-03-19 AllKind AllKind [4eb34b] Adapt some comments.
 gpl.txt 2011-01-13 AllKind AllKind [75c5db] Initial commit
 install.bash 2019-03-12 AllKind AllKind [469fb0] Retrieve systemd dir with pkg-config.
 ip-array.bin 2020-06-22 AllKind AllKind [a1f4f7] Bump version to 1.2.8
 ip-array.init 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array.init_pre_net_boot 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array.service 2017-11-05 AllKind AllKind [d9c674] Fix: use correct parameter for ExecStop.
 ip-array_bash_completion 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_global_defs 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_interactive_functions 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_ipset_functions 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_ipt_functions 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_main_functions 2020-06-22 AllKind AllKind [a39990] Bypass interface enumeration on lockdown mode
 ip-array_pre_net_boot.service 2017-11-05 AllKind AllKind [abe5b7] Remove RemainAfterExit.
 ip-array_tc_functions 2018-01-25 AllKind AllKind [97ced5] Update copyright time range.
 ip-array_xml_functions 2020-02-25 AllKind AllKind [26f75d] Fix parsing multiple XML tags on one line.
 uninstall.bash 2019-03-12 AllKind AllKind [469fb0] Retrieve systemd dir with pkg-config.

Read Me

IP-ARRAY README


What is IP-Array?
	IP-Array is a command-line program (you may also say `script') written for bash
	(the bash shell www.gnu.org/software/bash).
	It's purpose is to configure IPv4 firewalling and traffic shaping of a linux host.
	To achieve this, IP-Array modifies the linux kernels netfilter / traffic control
	subsystems via the userspace tools iptables / ipset / tc.
	It also allows to load and / or unload netfilter related kernel modules and
	configure the kernel using the sysctl program.

	Intended Audience: Advanced End Users, System Administrators.

	Field of application: From a single host system to a multi-homed router or gateway.

Where to get it?
	IP-Array is currently hosted at sf.net.
	The project page is at: http://sourceforge.net/projects/ip-array/.
	Its homepage is at: http://ip-array.sourceforge.net/.

Features
	It does support most features of iptables and some of xtables-addons.

	- iptables rules are written in simple XML.
		They can be written in different ways depending on the need.
		Either as (grouped / nested) XML tags, or so called ruleblocks,
		where only values have to be put into.
		Their structure is defined by custom templates.
	- ipset and sysctl rules are written in XML.
	- Different start modi.
	- Custom epilog and prolog scripts for each start mode.
	- Muliple levels of output verbosity with optional syslog logging.
	- Coloured output (can be disabled).
	- Automatic 'jump tree' creation options.
	- An interactive wizard based mode to create configuration files.
	- Public functions available in rule files.
	- ipset support. Besides creation of sets, they can also be imported from plain,
		or in ipset save XML format formatted files.
	- Some autoconfig presets for DNS, FTP, SMTP, NTP, IPSEC, etc.
	- Traffic shaping - creation of htb and sfq qdiscs, tc classes and filters.
	- The ability to save the generated iptables / ipset, tc rules, modprobe,
		or sysctl commands, selectively or all together, to a file.
	- Error handling. Previous system states can be restored on error.
	- An install and uninstall script.
	- Rich set of command line options.
	- Bash completion compspec is included.
	- A reference manual, man pages and command line help.
	
Installation, Configuration, System Requirements, etc.
	Please read the reference manual.