SRFirewall/INSTALL

50 lines
1.9 KiB
Plaintext
Raw Permalink Normal View History

2021-09-02 15:33:38 -06:00
SRFirewall v2.2.1 http://www.sosdg.org/freestuff/firewall
2014-04-12 12:14:40 -06:00
Written by: Brielle Bruns <bruns@2mbit.com>
2014-04-12 12:11:49 -06:00
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Installing is fairly straight forward:
2014-04-12 12:14:40 -06:00
1. Download to a location of your choosing, I recommend /usr/src
2. Run 'make install' to put files in /usr/local by default
3. Edit config files in /usr/local/etc/srfirewall
4. Run 'srfirewall' command to load the firewall and work its magic
2014-04-12 12:11:49 -06:00
If you are upgrading from a previous version and don't want to overwrite
your config files, use 'make upgrade'.
2014-04-12 12:12:51 -06:00
If you wish to install to some place other then /usr/local, you will
need to edit the Makefile PREFIX as well as the bin/srfirewall script to
reflect the new location.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
If you want to run from SVN trunk (for the brave), here's how I would do
it:
2014-04-12 12:11:49 -06:00
2014-04-12 12:13:54 -06:00
=== Begin commands ===
cd /usr/src
2021-09-02 15:33:38 -06:00
git clone https://git.sosdg.org/brielle/SRFirewall.git
ln -s /usr/src/srfirewall/lib /usr/local/lib/srfirewall
ln -s /usr/src/srfirewall/bin/srfirewall /usr/local/bin/srfirewall
cp -R /usr/src/srfirewall/etc /usr/local/etc/srfirewall
2014-04-12 12:14:40 -06:00
=== End commands ===
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
Then when you want to update to bleeding edge, all you have to run is
2021-09-02 15:33:38 -06:00
'git pull'.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
You _will_ need to look for newly changed/added files and update
appropriately.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
To make the update process easier, I made the config script look for a
local.conf file in etc/srfirewall that can be used to override the
default options. This will allow you to replace all of the *.conf files
on upgrade without losing local option changes.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
The default options are designed to be 'sane' for a good portion of the
many users, so the use of local.conf only needs specific options you
wish to override.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
Files in etc/srfirewall/ipv{4,6} can be safely left alone during upgrade
since I plan to not make upstream changes to them once they are written
and defined for use.
2014-04-12 12:11:49 -06:00
2014-04-12 12:12:51 -06:00
When in doubt, check the CHANGELOG file for mention of new config
options and/or config files.