matth
/
fw-daemon
mirror of https://github.com/subgraph/fw-daemon
1
1
Fork 0
Code Releases Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '8546f6c416'
${ noResults }
fw-daemon/fw-prompt
History
shw 5f5042fed4
Very noisy, experimental support for asynchronous multi-rule firewall prompting. 		8 years ago
..
README.txt Lots of assorted cleanup. 8 years ago
dbus.go Lots of work to establish basic support for approving/denying rules. 8 years ago
fw-prompt.go Very noisy, experimental support for asynchronous multi-rule firewall prompting. 8 years ago

README.txt 

To get this to work, first edit /usr/share/gnome-shell/modes/subgraph.json

Remove the entry for "firewall@subgraph.com", hit CTRL+F2 and then issue the reload "r" command.

Reset these changes to revert back to the old gnome-shell prompt.









Changes for getting this working in ubuntu:

(this is the crux of, but not all of the steps necessary to get this running)



apt-get install libnetfilter-queue-dev

#apt-get install all dependencies: gtk3/cairo/pango/glib etc.





mkdir /etc/sgfw

cat >> /etc/sgfw/sgfw.conf << EOF

log_level="NOTICE"

log_redact=false

prompt_expanded=true

prompt_expert=true

default_action="SESSION"

EOF





cp ./src/github.com/subgraph/fw-daemon/sources/etc/dbus-1/system.d/com.subgraph.Firewall.conf /etc/dbus-1/system.d/com.subgraph.Firewall.conf

iptables -t mangle -I PREROUTING 1 -m conntrack --ctstate NEW --proto tcp -j NFQUEUE --queue-num 0 --queue-bypass; iptables -I FORWARD 1 -m mark --mark 0x1 -j REJECT --reject-with icmp-host-prohibited



go install github.com/subgraph/fw-daemon

go install github.com/subgraph/fw-daemon/fw-settings

go install github.com/subgraph/fw-daemon/fw-prompt



GODEBUG=cgocheck=0 ./fw-daemon

Then launch ./fw-prompt